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(54) MARKING GENERATING APPARATUS, METHOD OF FORMING LASER MARKING ON 
OPTICAL DISK, REPRODUCING APPARATUS, OPTICAL DISK AND OPTICAL DISK 
PRODUCING METHOD 



(57) An object of the present invention is to provide 
a marking forming apparatus, a method of forming a 
laser marking on an optical disk, a reproduction appara- 
tus, an optical disk, and a method of manufacturing an 
optical disk, capable of providing a greatly improved 
copy prevention capability as compared to prior known 
construction. To achieve this object in the optical disk of 
Fig.1 



the invention, for example, a marking is formed by a 
laser on a reflective film of a disk holding data written 
thereon and at least position information of the marking 
or information concerning the position information is 
written on the disk in an encrypted form or with a digital 
signature appended thereto 
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Description 

TECHNICAL FIELD 

The present invention relates to a marking forming s 
apparatus, a method of forming a laser marking to an 
optical disk, a reproduction apparatus, an optical disk, 
and a method of manufacturing an optical disk, which 
may be utilized, for example, to prevent duplication of 
optical disks. 

BACKGROUND ART 

With increasing use of ROM-type optical disks in 
recent years, pirated disks have also been spreading, 
infringing the rights of copyright owners. 

This is because ROM disk manufacturing appara- 
tus have been made readily available and also have 
become easy to operate. 

A pirate can make a CD master disk just by extract- 
ing logic data from software contained on a CD, copying 
it onto a magnetic tape, and setting the tape on a mas- 
tering apparatus. Hundreds of thousands of pirated 
disks can be pressed from this single master disk. Since 
pirates do not pay royalties, they make a profit by selling 
pirated disks at a low price. This necessarily means a 
financial loss to the copyright owner. 

According to the current CD specification, only the 
function of reading logic data from a CD is provided, but 
no functions are provided to detect physical features of 
a disk. As a result, a pirated CD can be easily produced 
by bit-copying the logic data. 

The prior art discloses a method of preventing 
piracy by adding a function to recognize disk physical 
features. 

This method involves establishing a new specifica- 
tion that defines the inclusion of a physical mark on a 
master disk to prevent the pirating of disks made to this 
specification. As an example of the prior art, a piracy 
prevention method is known such as the one disclosed 
in Japanese Patent Unexamined Publication No. 5- 
325193. According to that method, in the cutting proc- 
ess the recording beam is deliberately swept in the 
tracking direction, when recording a designated region, 
to form a wobbling on the master disk When the disk is 
played back on a reproduction apparatus equipped with 
a wobbling detection circuit, the disk is checked to see 
whether the wobbling is formed in the designated 
region. If it is detected that the wobbling of a designated 
wobbling frequency is formed in the designated region, 
the disk is judged to be a legitimate disk; otherwise, the 
disk is judged to be a pirated disk 

More specifically based on predefined physical 
mark design data, a physical mark is formed on the 
masker disk by using a special mastering apparatus 
equipped with a wobbling function. This prevents pirates 
from making pirated disks since they do not have such 
special mastering apparatus nor physical mark design 
data. Such an anti-piracy mark needs to be formed on 



every disk made to this specification. However, since it 
is possible to extract this physical mark by examining a 
legitimate disk, the prior art method has had the prob- 
lem that pirated disks may be made if such a special 
mastering apparatus falls into the hands of an illegal 
person. In this patent specification, piracy prevention 
methods of the type that forms a physical mark on the 
master disk will be referred to as master disk level meth- 
ods. 

Besides the above-described method, there has 
been proposed a are sophisticated master disk level 
method which involves forming a are complicated phys- 
ical mark. On the other hand, a replica method is known 
that makes a replica having exactly the same physical 
features by melting the resin of a legitimate disk no mat- 
ter how complicated the physical mark is made at the 
master disk level. This method requires much time and 
cost to produce one master disk, but since hundreds of 
thousands of disks can be produced from one pirated 
master disk, the cost per pirated disk is low. This has 
therefore given rise to the problem that as the replica 
method becomes widespread in the future, it may defeat 
the effectiveness of piracy prevention techniques at the 
master disk level. 

As described above, the prior art piracy prevention 
techniques have several problems to be overcome. 

These problems are summarized below. 

Problem 1: The effectiveness of the master disk 
level piracy prevention techniques of the prior art is low 
since it is possible to replicate the physical mark. 

Problem 2: In the prior art method that forms a 
physical mark based on physical mark design data, if a 
manufacturing apparatus of the same precision as the 
apparatus used by the legitimate disk manufacturer is 
obtained, illegal disks can be easily manufactured. 

Problem 3: Since the security level provided by the 
prior art piracy prevention methods is fixed, its effective- 
ness decreases against constantly improving pirating 
techniques. 

Problem 4: If a disk format without copy protection 
were allowed to exist along with a disk format with copy 
protection, pirated disks could be made with the disk 
format without copy protection. It has therefore been 
necessary to produce all disks with copy protection. The 
use of copy protection is therefore limited to closed 
specifications such as game disks. 

Problem 5: According to the prior art methods, a 
limited number of licensing companies possess the spe- 
cial manufacturing apparatus and do not make the 
apparatus public. Therefore, software makers cannot 
make disks except at the licensing companies. 

Problem 6: In the master-disk marking method, all 
disks pressed from the same master disk have the 
same disk ID. This means that all disks can be run by 
using the same password. As a result, password secu- 
rity cannot be maintained unless a floppy disk or a com- 
munication line is used in combination. Furthermore, 
the password has to be entered each time the disk is 
used since secondary recording is not possible. 
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DISCLOSURE OF THE INVENTION 

In view of the above-outlined problems of the prior 
art. it is an object of the present invention to achieve a 
greatly improved copy prevention capability as com- 
pared to the prior art. 

More specifically, the present invention provides the 
following means to overcome the above-outlined six 
problems of the prior art piracy prevention methods. 

To overcome Problem 1, a piracy prevention 
method involving the use of a physical mark at a reflec- 
tive film level, rather than the master disk level physical 
mark as used in the prior art, is provided wherein the 
physical mark is formed on a reflective film of a disk. 
This prevents the production of pirated disks if duplica- 
tion is made at the master disk level. 

To overcome Problem 2, a new ROM-recording 
means is used that performs secondary recording to a 
two-disk laminated ROM disk by using a laser. In a first 
step, physical marks are randomly formed, and in a sec- 
ond step, the physical marks are measured with a 
measuring accuracy as high as 0.13 urn. In a third step, 
their position information is encrypted and, using the 
secondary recording means, a barcode is recorded to 
the ROM disk with an accuracy of several tens of 
microns which is the usual processing accuracy. Optical 
mark position information can thus be obtained with an 
accuracy of, for example, 0.1 urn, much higher than the 
processing accuracy of a conventional apparatus. Since 
optical marks cannot be formed with the accuracy of 0. 1 
fim by using commercially available equipment, produc- 
tion of pirated disks can be prevented. 

To overcome Problem 3. both a first-generation 
cipher with a low degree of security and a second-gen- 
eration cipher with a high degree of security, each enci- 
phering the position information with a digital signature, 
are prerecorded on a medium and by using such a 
medium, piracy is prevented with the security corre- 
sponding to the applicable generation if the design of 
reproduction apparatus changes from one generation to 
the next. 

To overcome Problem 4. an anti-piracy function 
identifier for indicating whether or not the software prod- 
uct is equipped with a copyright anti-piracy function is 
recorded on the master disk. To prevent the identifier 
from being altered, compressed information of software 
contents and the anti-piracy function identifier are 
scrambled and encrypted together when recording the 
software contents on the master disk. Since the identi- 
fier cannot be altered, pirates cannot produce disks with 
a disk format without anti-piracy measures. This pre- 
vents the production of pirated disks. 

To overcome Problem 5, as a secret key for digital 
signature encryption indispensable for the manufacture 
of disks, a subkey is generated from a master key, and 
the subkey is delivered to each software maker, thereby 
allowing the software maker to manufacture legitimate 
disks at its own factory. 



To overcome Problem 6, position information of an 
antipiracy mark of the invention, which differs from one 
disk to another, is used as a disk identifier. The position 
information and the disk serial number, i.e., the disk ID, 
s are combined and encrypted together with a digital sig- 
nature, thus appending an unalterable disk ID to each 
disk. Since each completed disk has a different ID, the 
password is also different. The password does not work 
on other disks. This enhances password security. 
10 Also, with the secondary recording of the invention, 
the password is secondary-recorded on the disk, per- 
manently making the disk an operable disk. 

Specific methods for overcoming the above six 
problems are disclosed below by way of embodiments. 
15 The invention provides a marking forming appara- 
tus comprising: marking forming means for applying at 
least one marking to at least one reflective film formed 
to a disk; marking position detecting means for detect- 
ing at least one position of said marking; and position 
20 information output means for outputting said detected 
position as position information of said marking. 

The invention also provides a marking forming 
apparatus further comprising position information writ- 
ing means for writing at least said output position infor- 
ms mation or information concerning said position 
information to said disk or to a different medium. 

The invention also provides a method of forming a 
laser marking to an optical disk, comprising the steps of: 
forming at least one disk; forming a reflective film to said 
30 formed disk; laminating two disks together, said disks 
including at least one disk with said reflective film 
formed thereon; and forming at least one marking by a 
laser on said reflective layer of the laminated disks. 
The invention also provides a reproduction appara- 
35 tus comprising: position information reading means for 
reading position information of at least one marking or 
information concerning said position information, said 
marking being formed to at least one reflective film 
formed to a disk and being detected for a position 
40 thereof, at least the position thus detected being output 
as said position information of said marking; marking 
reading means for reading information concerning at 
least one actual position of said marking; compar- 
ing/judging means for performing comparison and 
45 judgement by using a result of reading by said position 
information reading means and a result of reading by 
said marking reading means; and reproducing means 
for reproducing recorded data on said optical disk in 
accordance with a result of the comparison and judge- 
so merit performed by said comparing/judging means. 

The invention also provides a method of manufac- 
turing an optical disk, comprising the steps of: forming 
at least one disk; forming a reflective film to said formed 
disk; applying at least one marking to said reflective 
55 film; detecting at least one position of said marking; and 
outputting said detected position as position information 
of said marking, and encrypting said information for 
writing to said disk. 
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The invention also provides a method of manufac- 
turing an optical disk, comprising the steps of: forming 
at least one disk; forming a reflective film to said formed 
disk; applying at least one marking to said reflective 
film; detecting at least one position of said marking; and 5 
outputting said detected position as position information 
of said marking, and applying a digital signature in rela- 
tion to said position information for writing to said disk 

The invention also provides an optical disk wherein 
at least one marking is formed by a laser to at least one 10 
reflective film of the disk holding data written thereon 
and at least position information of said marking or infor- 
mation concerning said position information is written to 
said disk in an encrypted form or with a digital signature 
applied thereto. 15 

The invention also provides an optical disk having a 
structure such that at least one reflective film is sand- 
wiched directly or indirectly between two members 
formed from material resistant to laser light, wherein at 
least one marking is formed by a laser to said reflective 20 
film. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a diagram showing a disk manufacturing 25 
process and a secondary recording process 
according to the present embodiment; 
Figure 2(a) is a top plan view of a disk according to 
the embodiment, (b) is a top plan view of the disk 
according to the embodiment, (c) is a top plan view 30 
of the disk according to the embodiment, (d) is a 
transverse sectional view of the disk according to 
the embodiment, and (e) is a waveform diagram of 
a reproduced signal according to the embodiment; 
Figure 3 is a flowchart illustrating a process of 35 
recording encrypted position information on a disk 
in the form of a barcode according to the present 
embodiment; 

Figure 4 is a diagram showing a disk fabrication 
process and a secondary recording process (part 40 

1) according to the present embodiment; 

Figure 5 is a diagram showing the disk fabrication 
process and the secondary recording process (part 

2) according to the present embodiment; 

Figure 6 is a diagram showing a two-layer disk fab- 45 
rication process (part 1) according to the present 
embodiment; 

Figure 7 is a diagram showing the two-layer disk 
fabrication process (part 2) according to the 
present embodiment; so 
Figure 8(a) is an enlarged view of a nonreflective 
portion of a laminated type according to the present 
embodiment, and (b) is an enlarged view of a non- 
reflective portion of a single-plate type according to 
the present embodiment; ss 
Figure 9(a) is a reproduced-waveform diagram for a 
nonreflective portion according to the present 
embodiment, (b) is a reproduced-waveform dia- 
gram for a nonreflective portion according to the 



present embodiment, and (c) is a reproduced- 
waveform diagram for a nonreflective portion 
according to the present embodiment; 
Figure 10(a) is a cross-sectional view of a nonre- 
flective portion of the laminated type according to 
the present embodiment, and (b) is a cross-sec- 
tional view of a nonreflective portion of the single- 
plate type according to the present embodiment; 
Figure 11 is a schematic diagram, based on an 
observation through a transmission electron micro- 
scope, illustrating a cross section of the nonreflec- 
tive portion according to the present embodiment; 
Figure 12(a) is a cross-sectional view of a disk 
according to the present embodiment, and (b) is a 
crosssectional view of the nonreflective portion of 
the disk according to the present embodiment; 
Figure 13(a) is a diagram showing a physical 
arrangement of addresses on a legitimate CD 
according to the embodiment, and (b) is a physical 
arrangement of addresses on an illegally duplicated 
CD according to the embodiment; 
Figure 1 4 is a block diagram for disk manufacturing 
according to the embodiment; 
Figure 15 is a block diagram of a low-reflectivity 
position detector according to the embodiment; 
Figure 16 is a diagram illustrating the principle of 
detecting address/clock positions of a low-reflectiv- 
ity portion according to the embodiment; 
Figure 17 is a diagram showing a comparison of 
low-reflectivity portion address tables for a legiti- 
mate disk and a duplicated disk; 
Figure 1 8 is a flowchart illustrating a disk check pro- 
cedure using a one-direction function according to 
the embodiment; 

Figure 19 is a diagram showing a comparison of 
address coordinate positions on different master 
disks according to the embodiment; 
Figure 20 is a flowchart illustrating a low-reflectivity 
position detecting program according to the embod- 
iment; 

Figure 21 is a block diagram of a magnetic record- 
ing apparatus according to the embodiment: 
Figure 22 is a flowchart illustrating a procedure for 
encryption, etc. using an RS A function according to 
the embodiment; 

Figure 23 is a flowchart illustrating a procedure for 
digital signature, etc. using an elliptic function 
according to the embodiment; 
Figure 24 is a flowchart illustrating a position infor- 
mation check process according to the embodi- 
ment; 

Figure 25 is a block diagram of an information 
processing apparatus according to the embodi- 
ment; 

Figure 26 is a top plan view of a second low-reflec- 
tivity portion according to the embodiment; 
Figure 27 is a diagram showing a detected wave- 
form of a first-layer marking signal according to the 
present embodiment; 
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Figure 28 is a diagram showing a detected wave- 
form of a second-layer marking signal according to 
the present embodiment; 

Figure 29 is a block diagram of a disk manufactur- 
ing apparatus according to the present embodi- 
ment; 

Figure 30 is a code diagram for a nonref lective por- 
tion according to the present embodiment; 
Figure 31 is a diagram showing a detected wave- 
form from the nonref lective portion according to the 
present embodiment; 

Figure 32 is a diagram for explaining the contents of 
barcode recorded information and the relative rela- 
tionship thereof according to the present embodi- 
ment; 

Figure 33 is a perspective view showing the nonre- 
f lective portion formed in the two-layer disk accord- 
ing to the present embodiment; 
Figure 34 is a diagram for explaining data flow in 
disk distribution according to the present embodi- 
ment; 

Figure 35 is a diagram showing a process of disk 
distribution according to the present embodiment; 
Figure 36 is a block diagram for explaining a manu- 
facturing process when applying complex encryp- 
tion to position information, etc. by using a master 
key subkey, etc. according to the present embodi- 
ment; 

Figure 37 is a block diagram for explaining the man- 
ufacturing process when applying complex encryp- 
tion to position information, etc. by using the master 
key, subkey, etc. according to the present embodi- 
ment; 

Figure 38 is a flowchart in a reproduction apparatus 
according to the present embodiment; 
Figure 39 is a diagram showing a secret key cipher 
and a public key cipher used in combination on opti- 
cal disks and their relationship with reproduction 
apparatus according to the present embodiment; 
Figure 40 is a block diagram showing an outline of 
a process of recording position information, etc., 
encrypted with a master key, subkey, etc.. on an 
optical disk and a process of reproducing such 
information according to the present embodiment; 
Figure 41 is a block diagram of an optical disk 
reproduction apparatus according to the present 
embodiment; and 

Figure 42 is a flowchart illustrating the function of a 
scramble identifier and the switching between drive 
ID and desk ID in a program installation process 
according to the present embodiment. 

BEST MODE FOR CARRYING OUT THE INVENTION 

The constitution and operation of a marking forming 
apparatus, a method of forming a laser marking to an 
optical disk, a reproduction apparatus, an optical disk, 
and a method of manufacturing an optical disk will be 



described below in accordance with an embodiment of 
the present invention. 

In the description of the present embodiment given 
herein, the first half part (1) deals with such operations 

5 as manufacturing a disk, forming a marking by using a 
laser, reading position information of the marking, per- 
forming encryption and other processing on the position 
information, etc. for writing on an optical disk, and repro- 
ducing the optical disk on a player. The encryption and 

10 reproduction operations are briefly described in the first 
part(1). 

Next, in the second half part (2), the encryption and 
other processing of the marking position information, 
etc. and the decryption and reproduction of the position 

15 information, etc. on the optical disk, briefly described in 
the first part (1), will be described in further detail. The 
second part (2) also deals with various techniques for 
preventing piracy. 

In this patent specification, laser trimming is also 

20 referred to as laser marking, while a nonreflective opti- 
cal marking portion is simply referred to as the marking 
or optical marking or, sometimes, as the physical ID 
unique to the disk. 

(1) Figure 1 is a flowchart illustrating a general 

25 process flow from disk manufacturing to the completion 
of an optical disk. 

First, the software company performs software 
authoring in software production process 820. The com- 
pleted software is delivered from the software company 

30 to the disk manufacturing factory. In disk manufacturing 
process 816 at the disk manufacturing factory, the com- 
pleted software is input in step 818a. a master disk is 
produced (step 818b). disks are pressed (steps 81 8e. 
818g), reflective films are formed on the respective 

35 disks (steps 818f, 81 8h), the two disks are laminated 
together (step 81 8i). and a ROM disk such as a DVD or 
CD is completed (step 818m, etc.). 

The thus completed disk 800 is delivered to the 
software maker or to a factory under control of the soft- 

40 ware maker, where, in secondary recording process 
817, an anti-piracy marking 584, such the one shown in 
Figure 2, is formed (step 819a), and accurate position 
information of this mark is read by a measuring means 
(step 819b) to obtain the position information which 

45 serves as the physical feature information of the disk. 
This physical feature information of the disk is 
encrypted in step 819c. The encrypted information is 
converted to a PWM-modulated signal which is then 
recorded in step 819d as a barcode signal on the disk 

so by using a laser. The disk physical feature information 
may be combined together with software feature infor- 
mation for encryption in step 819c. 

The above processes will be described in further 
detail. That is. a disk fabrication process, a marking for- 

55 mation process, a marking position reading process, 
and an encrypted information writing process for an 
optical disk according to the present invention will be 
described in detail with reference to Figures 4 and 5 and 
Figures 8 to 12. A supplementary explanation will also 
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be given dealing with a disk having two reflective layers 
with reference to Figures 6 and 7. In the following 
description, the marking formation process and the 
marking position reading process are collectively called 
the secondary recording process. 5 

(A) First, the disk fabrication process will be 
described. In the disk fabrication process 806 shown in 
Figure 4. first a transparent substrate 801 is pressed in 
step (1). In step (2), a metal such as aluminum or gold 
is sputtered to form a reflective layer 802. An adhesive 
layer 804 formed from an ultraviolet curing resin is 
applied by spin coating to a substrate 803 formed in a 
different processing step, and the substrate 803 is 
bonded to the transparent substrate 801 having the 
reflective layer 802. and they are rotated at high speed 
to make the bonding spacing uniform. By exposure to 
external ultraviolet radiation, the resin hardens, thus 
firmly bonding the two substrates together. In step (4), a 
printed layer 805 where a CD or DVD title is printed, is 
printed by screen printing or offset printing. Thus, in 
step (4), the ordinary laminated-type optical ROM disk 
is completed. 

(B) Next, the marking formation process will be 
described with reference to Figures 4 and 5. In Figure 4, 
a laser beam from a pulsed laser 813 such as a YAG 
laser is focused through a converging lens 814 onto the 
reflective layer 802, to form a nonreflective portion 815 
as shown in step (6) in Figure 5. That is. a distinct wave- 
form, such as the waveform (A) shown in step (7). is 
reproduced from the nonreflective portion 815 formed in 
step (6) in Figure 5. By slicing this waveform, a marking 
detection signal such as shown by waveform (B) is 
obtained, from which hierarchial marking position infor- 
mation comprising an address, such as shown in signal 
(d), and an address, a frame synchronizing signal 
number, and a reproduced clock count, such as shown 
in signal (e), can be measured. 

As previously stated, a supplementary explanation 
will be given below of an alternative type of disk (a two- 
layer laminated disk) with reference to Figures 6 and 7. 

Figures 4 and 5 showed a disk generally known as 
a single-layer laminated disk which has a reflective layer 
only on one substrate 801. On the other hand. Figures 
6 and 7 show a disk generally known as a two-layer lam- 
inated disk which has reflective layers on both sub- 
strates 801 and 803. For laser trimming, the processing 
steps (5) and (6) are fundamentally the same for both 
types of disks, except with significant differences which 
are briefly described below. First, while the single-layer 
disk uses a reflective layer formed from an aluminum 
film having reflectivity as high as 70% or over, in the 
two-layer disk the reflective layer 801 formed on the 
reading-side substrate 801 is a semi-transparent gold 
(Au) film having a reflectivity of 30%, while the reflective 
layer 802 formed on the print-side substrate 803 is the 
same as that used in the single-layer disk. Second, as 
compared with the single-layer disk, the two-layer disk is 
required to have high optical accuracy; for example, the 
adhesive layer 804 must be optically transparent and be 



uniform in thickness, and the optical transparency must 
not be lost due to laser trimming. Figures 7(7), 7(8), and 
7(9) show the waveform from the first layer of the two- 
recording-layer disk. The waveform from the second 
layer is similar to that from the first layer, though the sig- 
nal level is lower than from the first layer. However, since 
the first and second layers are bonded together, relative 
positional accuracy between them is random and can 
be controlled only with an accuracy of a few hundred 
microns. As will be described later, since the laser beam 
passes through the two reflective films, to make an ille- 
gal disk the position informations on the first and second 
layers for the first mark, for example, have to be made to 
match the same value on the legitimate disk. But mak- 
ing them match would require a near-submicron accu- 
racy in laminating, and consequently, making illegal 
disks of the two-layer type is practically impossible. 

The technique for forming the nonreflective optical 
marking portion will be described in further detail in sec- 
tions (a) to (d) below with reference to Figures 8 to 12, 
etc., dealing with the laminated type in comparison with 
a single-plate type. Figures 8(a) and (b) are micro- 
graphs showing plan views of nonreflective optical 
marking portions, and Figure 10 is a simplified sche- 
matic cross-sectional view of a nonreflective portion of 
the two-layer laminated disk. 

(a) Using a 5 nj/pulse YAG laser, a laser beam was 
applied to a 500-angstrom aluminum layer lying 0.6 
mm below the surface of a 1 2-mm thick ROM disk 
consisting of two 0.6-mm thick disks laminated 
together, and, as a result, a 12-nm wide slit-like 
nonreflective portion 815 was formed, as shown in 
the X 750 micrograph of Figure 8(a). In this X 750 
micrograph, no aluminum residues were observed 
on the nonreflective portion 815. Thick swollen alu- 
minum layers, 2000 angstroms thick and 2 nm 
wide, were observed along boundaries between the 
nonreflective portion 815 and reflective portions. As 
shown in Figure 10(a), it was confirmed that no sig- 
nificant damage had occurred inside. In this case, 
the application of the pulsed laser presumably 
melted the aluminum reflective layer, causing a 
phenomenon of molten aluminum buildup along the 
boundaries on both sides due to the surface ten- 
sion. We call this a hot melt surface tension (HMST) 
recording method. This is a characteristic phenom- 
enon observed only on a laminated disk 800. Figure 
1 1 is a schematic diagram, based on an observa- 
tion through a transmission electron microscope 
(TEM), illustrating a cross section of the nonreflec- 
tive portion formed by the above laser trimming 
process. In the figure, if the aluminum film swollen 
portion is 1.3 nm wide and 0.20 ^m thick, the 
amount of increased aluminum in that portion is 1 .3 
x (0.20 - 0.05) = 0.195 jim 2 . The amount of alumi- 
num originally deposited in a half portion (5 urn) of 
the laser exposed region (10 nm) was 5 x 0.05 = 
0.250 nm 2 . The difference is calculated as 0.250 - 
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0.195 = 0.055 jim 2 . In terms of length, this is equiv- 
alent to 0.055/0.05 = 1.1 urn. This means that an 
aluminum layer of 0.05 jim thickness and 1.1 nm 
length remained, and therefore, it can be safely said 
that almost all aluminum was drawn to the film swol- 5 
len portion. Thus, the result of the analysis of the 
figure also verifies the explanation about the above- 
described characteristic phenomenon. 

(b) We will next deal with the case of a single-plate 
optical disk (an optical disk comprising a single to 
disk). An experiment was conducted by applying 
laser pulses of the same power to a 0.05 nm thick 
aluminum reflective film formed on a single-sided 
molded disk, of which result is shown in Figure 8(b). 

As shown in the figure, aluminum residues were is 
observed, and since these aluminum residues 
cause reproduction noise, it can be seen that the 
single-plate type is not suitable for secondary 
recording of optical disk information of which a high 
density and a low error rate are demanded. Fur- 20 
thermore. unlike the laminated disk, in the case of 
the single-plate disk, the protective layer 862 is 
inevitably damaged, as shown in Figure 10(b), 
when the nonreflective portion is subjected to laser 
trimming. The degree of damage depends on the 2s 
laser power, but the damage cannot be avoided 
even if the laser power is controlled accurately. 
Moreover, according to our experiment, the printed 
layer 805 formed by screen printing to a thickness 
of a few hundred microns on the protective layer 30 
862 was damaged when its thermal absorptance 
was high. In the case of the single-plate disk, to 
address the problem of protective layer damage, 
either the protective layer has to be applied once 
again or the laser cut operation should be per- 35 
formed before depositing the protective layer. In any 
case, the single-plate type may present a problem 
in that the laser cut process has to be incorporated 
in the pressing process. This limits the application 
of the single-plate disk despite its usefulness. 40 

(c) A comparison between single-plate disk and 
laminated disk has been described above, using a 
two-layer laminated disk as an example. As is 
apparent from the above description, the same 
effect as obtained with the two-layer laminated disk 45 
can be obtained with the single-layer laminated 
disk. Using Figures 12(a). 12(b). etc.. a further 
description will be given dealing with the single- 
layer type. As shown in Figure 12(a). the reflective 
layer 802 has the transparent substrate 80 1 of poly- so 
carbonate on one side, and the hardened adhesive 
layer 804 and a substrate on the other side, the 
reflective layer 802 thus being hermetically sealed 
therebetween. In this condition, pulsed laser light is 
focused thereon for heating; in the case of our 55 
experiment, heat of 5 (iJ/pulse is applied to a circu- 
lar spot of 10 to 20 urn diameter on the reflective 
layer 802 for a short period of 70 ns. As a result, the 
temperature instantly rises to 600°C, the melting 



point, melting state is caused. By heat transfer, a 
small portion of the transparent substrate 801 near 
the spot is melted, and also a portion of the adhe- 
sive layer 804 is melted. The molted aluminum in 
this state is caused by surface tension to build up 
along boundaries 821a and 821b, with tension 
being applied to both sides, thus forming buildups 
822a and 822b of hardened aluminum, as shown in 
Figure 12(b). The nonreflective portion 584 free 
from aluminum residues is thus formed. This shows 
that a clearly defined nonreflective portion 584 can 
be obtained by laser-trimming the laminated disk as 
shown in Figure 10(a). Exposure of the reflective 
layer to the outside environment due to a damaged 
protective layer, which was the case with the single- 
plate type, was not observed even when the laser 
power was increased more than 10 times the opti- 
mum value. After the laser trimming, the nonreflec- 
tive layer 584 has the structure shown in Figure 
12(b) where it is sandwiched between the two 
transparent substrates 801 and sealed on both 
sides with the adhesive layer 804 against the out- 
side environment, thus producing the effect of pro- 
tecting the structure from environmental effects, 
(d) Another benefit of laminating two disks together 
will be described next. When secondary recording 
is made in the form of a barcode, an illegal manu- 
facturer can expose the aluminum layer by remov- 
ing the protective layer in the case of a single-plate 
disk, as shown in Figure 10(b). This gives rise to a 
possibility that nonecrypted data may be tampered 
with by redepositing an aluminum layer over the 
barcode portion on a legitimate disk and then laser- 
trimming a different barcode. For example, if the ID 
number is recorded in plaintext or separately from 
main ciphertext, in the case of a single-plate disk it 
is possible to alter the ID number, enabling illegal 
use of the software by using a different password. 
However, if the secondary recording is made on the 
laminated disk as shown in Figure 10(a). it is diffi- 
cult to separate the laminated disk into two sides In 
addition, when removing one side from the other, 
the aluminum reflective film is partially destroyed. 
When the anti-piracy marking is destroyed, the disk 
wilt be judged as being a pirated disk and will not 
run. Accordingly, when making illegal alterations to 
the laminated disk, the yield is low and thus illegal 
alterations are suppressed for economic reasons. 
Particularly, in the case of the two-layer laminated 
disk, since the polycarbonate material has temper- 
ature/humidity expansion coefficients, it is nearly 
impossible to laminate the two disks, once sepa- 
rated, by aligning the anti-piracy markings on the 
first and second layers with an accuracy of a few 
microns, and to mass produce disks. Thus, the two- 
layer type provides a greater effectiveness in piracy 
prevention. It was thus found that a clearly defined 
slit of a nonreflective portion 584 can be obtained 
by laser-trimming the laminated disk 800. 
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The technique for forming the nonreflective optical 
marking portion has been described in (a) to (d) above. 

(C) Next, the process of reading the position of the 
thus formed marking will be described. 

Figure 15 is a block diagram showing a low reflec- 
tivity light amount detector 586 for detecting the nonre- 
flective optical marking portion, along with its adjacent 
circuitry, in an optical disk manufacturing process. Fig- 
ure 16 is a diagram illustrating the principle of detecting 
address/clock positions of the low reflectivity portion. 
For convenience of explanation, the following descrip- 
tion deals with the operating principle when a read oper- 
ation is performed on a nonreflective portion formed on 
an optical disk constructed from a single disk. It will be 
recognized that the same operating principle also 
applies to an optical disk constructed from two disks 
laminated together. 

As shown in Figure 15, the disk 800 is loaded into a 
marking reading apparatus equipped with a low reflec- 
tivity position detector 600 to read the marking, and in 
this case, since a signal waveform 823 due to the pres- 
ence and absence of pits and a signal waveform 824 
due to the presence of the nonreflective portion 584 are 
significantly different in signal level, as shown in the 
waveform diagram of Figure 9(a), they can be clearly 
distinguished using a simple circuit 

The start position and end position of the nonreflec- 
tive portion 564 having the above waveform can be eas- 
ily detected by the low reflectivity light amount detector 
586 shown in the block diagram of Figure 15. Using the 
reproduced clock signal as the reference signal, posi- 
tion information is obtained in a low reflectivity position 
information output section 596. 

As shown in Figure 15. a comparator 587 in the low 
reflectivity light amount detector 586 detects the low 
reflectivity light portion by detecting an analog light 
reproduced signal having a lower signal level than a 
light amount reference value 588. During the detection 
period, a low reflectivity portion detection signal of the 
waveform shown in Figure 16(5) is output. The 
addresses and clock positions of the start position and 
end position of this signal are measured. 

The reproduced light signal is waveshaped by a 
waveform shaping circuit 590 having an AGC 590a, for 
conversion into a digital signal. A clock regenerator 38a 
regenerates a clock signal from the waveshaped signal. 
An EFM demodulator 592 in a demodulating section 
591 demodulates the signal, and an ECC corrects 
errors and outputs a digital signal. The EFM-demodu- 
lated signal is also fed to a physical address output sec- 
tion 593 where an address of MSR from Q bits of a 
subcode in the case of a CD, is output from an address 
output section 594 and a synchronizing signal, such as 
a frame synchronizing signal, is output from a synchro- 
nizing signal output section 595. From the clock regen- 
erator 38a, a demodulated clock is output. 

In a low reflectivity portion address/clock signal 
position signal output section 596, a low reflectivity por- 
tion start/end position detector 599 accurately meas- 



ures the start posistion and end position of the low 
reflectivity portion 584 by using an (n-1) address output 
section 597 and an address signal as well as a clock 
counter 598 and a synchronizing clock signal or the 

5 demodulated clock. This method will be described in 
detail by using the waveform diagrams shown in Figure 
16. As shown in the cross-sectional view of the optical 
disk in Figure 16(1), the low reflectivity portion 584 of 
mark number 1 is formed partially. A reflection selope 

w signal such as shown in Figure 16(3), is output, the sig- 
nal level from the reflective portion being lower than the 
light amount reference value 588. This is detected by 
the light level comparator 587, and a low reflectivity light 
detection signal, such as shown in Figure 16(5), is out- 

15 put from the low reflectivity light amount detector 586. 
As shown by a reproduced digital signal in Figure 1 6(4), 
no digital signal is output from the mark region since it 
does not have a reflective layer. 

Next, to obtain the start and end positions of the low 

20 reflectivity light detection signal, the demodulated clock 
or synchronizing clock shown in Figure 16(6) is used 
along with address information. First, a reference clock 
605 at address n in Figure 1 6(7) is measured. When the 
address immediately preceding the address n is 

25 detected by the (n-1) address output section 597, it is 
found that the next sync 604 is a sync at address n. The 
number of clocks from the synch 604 to the reference 
clock 605, which is the start position of the low reflectiv- 
ity light detection signal, is counted by the clock counter 

30 598. This clock count is defined as a reference delay 
time TD which is measured by a reference delay time 
TD measuring section 608 for storage therein. 

The circuit delay time varies with reproduction 
apparatus used for reading, which means that the refer- 
as ence delay time TD varies depending on the reproduc- 
tion apparatus used. Therefore, using the TD. a time 
delay corrector 607 applies time correction, and the 
resulting effect is that the start clock count for the low 
reflectivity portion can be measured accurately if repro- 

40 duction apparatus of different designs are used for read- 
ing. Next, by finding the clock count and the start and 
end addresses for the optical mark No. 1 in the next 
track, clock m+14 at address n+12 is obtained, as 
shown in Figure 16(8). Since TD = m + 2, the clock 

45 count is corrected to 1 2 , but for convenience of explana- 
tion, n+14 is used. We will describe another method, 
which eliminates the effects of varying delay times with- 
out having to obtain the reference delay time TD in the 
reproduction apparatus used for reading. This method 

so can check whether the disk is a legitimate disk or not by 
checking whether the positional relationship of mark 1 
at address n in Figure 16(8) relative to another mark 2 
matches or not. That is, TD is ignored as a variable, and 
the difference between the position, A1 = a1 + TD . of 

55 mark 1 measured and the position, A2 = a2 + TD , of 
mark 2 measured is obtained, which is given as 
A1 - A2 = al - a2 . At the same time, it is checked 
whether this difference matches the difference, a1 - a2. 
between the position a1 of the decrypted mark 1 and 
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the position information a2 of the mark 2, thereby judg- 
ing whether the disk is a legitimate disk or not The 
effect of this method is that the positions can be 
checked after compensating for variations of the refer- 
ence delay time TD by using a simpler constitution. 5 

(D) Next, the encrypted information writing process 
will be described. The position information read in the 
process (C) is encrypted (digital signature), as will be 
described in detail in the next section (2). and is written 
on the optical disk using a barcode or other method. 10 
Figure 3 shows how this is done. In Figure 3(1), the 
reflective layer is trimmed by a pulsed laser, and a bar- 
code-like trimming pattern, such as shown in Figure 
3(2), is formed. At a reproduction apparatus (player), an 
envelope waveform some portions of which are missing is 
as shown in Figure 3(3) is obtained. The missing por- 
tions generate a low level signal which is different from 
a signal generated from an ordinary pit, and this signal 
is sliced by a second slice level comparator to obtain a 
low reflectivity portion detection signal as shown in Fig- 20 
ure 3(4). From this low reflectivity portion detection sig- 
nal, a PWM demodulator 621 in Figure 3(5) 
demodulates the signal containing encrypted informa- 
tion. 

The processing steps in the optical disk manufac- 25 
turing process have been described above. Next, the 
constitution and operation of a reproduction apparatus 
(player) for reproducing the thus completed optical disk 
on a player will be described with reference to Figure 
41. 30 

In the figure, the construction of an optical disk 
9102 will be described first. A marking 9103 is formed 
on a reflective layer (not shown) deposited on the opti- 
cal disk 9102. In the manufacturing process of the opti- 
cal disk, the position of the marking 9103 was detected 3s 
by position detecting means, and the detected position 
was encrypted as marking position information and writ- 
ten on the optical disk in the form of a barcode 9104. 

Position information reading means 9101 reads the 
barcode 9104, and decrypting means 9105 contained 40 
therein decrypts the contents of the barcode for output. 
Marking reading means 9106 reads the actual position 
of the marking 9103 and outputs the result. Compar- 
ing/judging means 9107 compares the decrypted result 
from the decrypting means 9105 contained in the posi- 45 
tion information reading means 9101 with the result of 
reading by the marking reading means 9106, and 
judges whether the two agree within a predetermined 
allowable range. If they agree, a reproduction signal 
91 08 for reproducing the optical disk is output; if they do so 
not agree, a reproduction stop signal 9109 is output. 
Control means (not shown) controls the reproduction 
operation of the optical disk in accordance with these 
signals; when the reproduction stop signal is output, an 
indication to the effect that the optical disk is an illegal ss 
duplicated disk is displayed on a display (not shown) 
and the reproduction operation is stopped. In the above 
operation, it will be recognized that it is also possible for 
the marking reading means 9106 to use the decrypted 



result from the decrypting means 9105 when reading 
the actual position of the marking 9103. 

Thus the reproduction apparatus of the above con- 
struction can detect an illegally duplicated optical disk 
and stop the reproduction operation of the disk and can 
prevent illegal duplicates practically . 

The foregoing description has dealt with the proc- 
ess from optical disk manufacturing to the reproduction 
operation of the player, and we will now proceed to a 
description of appertaining matters relating to the 
details of the above process. 

(A) A low reflectivity portion address table, which is 
a position information list for the low reflectivity portion, 
will be explained. 

(a) Laser markings are formed at random in the 
anti-piracy mark formation process at the factory. 
No laser markings formed in this manner can be 
identical in physical feature. In the next process 
step, the low reflectivity portion 584 formed on each 
disk is measured with a resolution of 0.13 urn in the 
case of a DVD, to construct a low reflectivity portion 
address table 609 as shown in Figure 13(a). Here. 
Figure 13(a) is a diagram showing a low reflectivity 
portion address table, etc. for a legitimate CD man- 
ufactured in accordance with the present embodi- 
ment, and Figure 13(b) is concerned with an 
illegally duplicated CD. The low reflectivity portion 
address table 609 is encrypted using a one-direc- 
tion function such as the one shown in Figure 18, 
and in the second reflective-layer forming step, a 
series of low reflectivity portions 584c to 584e, 
where the reflective layer is removed, is recorded in 
a barcode-like pattern on the innermost portion of 
the disk, as shown in Figure 2. Alternatively, it may 
be recorded on a magnetic recording portion 67 of 
a CD-ROM, as shown in Figure 14. Figure 18 is a 
flowchart illustrating a disk check procedure by the 
one-way function used for the encryption, and Fig- 
ure 14 is a block diagram of a disk making appara- 
tus and a special recording/reproduction apparatus. 
As shown in Figure 13, the legitimate CD and the 
illegally duplicated CD have the low reflectivity por- 
tion address tables 609 and 609x, respectively, 
which are substantially different from each other. 
One factor resulting in this difference is that laser 
markings identical in physical feature cannot be 
made, as earlier noted. Another factor is that the 
sector address preassigned to the disk is different if 
the master disk is different 

Referring now to Figure 13, we will describe 
how the marking position information differs 
between the legitimate disk and pirated disk. The 
figure shows an example in which the above two 
factors are combined. In the example shown, two 
markings are formed on one disk. In the case of the 
legitimate CD, the f irst marking of mark number 1 is 
located at the 262nd clock position from the start 
point of the sector of logical address A1, as shown 
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in the address table 609. In the case of a DVD, one 
clock is equivalent to 0.13 urn, and the measure- 
ment is made with this accuracy. On the other hand, 
in the case of the pirated CD, the first marking is 
located at the 81st clock position in the sector of 5 
address A2, as shown in the address table 609x. By 
detecting this difference of the first marking position 
between the legitimate disk and pirated disk, the 
pirated disk can be distinguished. Likewise, the 
position of the second marking is also different. To 70 
make the position information match that of the 
legitimate disk, the reflective film at the 262nd posi- 
tion in the sector of address A1 must be formed with 
an accuracy of one clock unit, i.e., 0.13 urn; other- 
wise, the pirated disk cannot be run. 1S 

Accordingly, as shown in Figure 14, in the 
reproduction apparatus, the encrypted table is 
decrypted to reconstruct the legitimate table which 
is then checked by a check program 535 to differen- 
tiate between the legitimate disk and illegally-dupli- 20 
cated disk, and to stop the reproduction operation 
in the case of a duplicated disk In the example of 
Figure 16, the legitimate disk and illegally dupli- 
cated disk have low reflectivity portion address 
tables 609 and 609x respectively, where values are 25 
different as shown in Figure 1 7. In the case of the 
legitimate disk, in the track following the mark 1 the 
start and end positions are m+14 and m+267, 
respectively, as shown in Figure 16(8), whereas in 
the case of the illegally duplicated disk these are 30 
m+24 and m+277, respectively, as shown in Figure 
16(9). Therefore, the corresponding values in the 
low reflectivity portion address tables 609 and 609x 
are different, as shown in Figure 1 7, thus making it 
possible to distinguish the duplicated disk. If an ille- 35 
gal manufacturer desires to make a copy of the disk 
having the low reflectivity portion address table 
609, they will have to perform a precise laser trim- 
ming operation with the resolution of the repro- 
duced clock signal as shown in Figure 16(8). In the 40 
case of a DVD disk, the period T of the reproduced 
clock pulse, when converted to a distance on the 
disk, is 0.13 um as shown in Figure 27(5). Accord- 
ingly, to make an illegal copy, the reflective film will 
have to be removed with a submicron resolution of 45 
0.1 urn. It is true that when an optical head 
designed for an optical disk is used, a recording can 
be made on a recording, film such as a CD-R with a 
submicron resolution. But in this case, the repro- 
duced waveform will be as shown in Figure 9(c), so 
and the distinct waveform 824 as shown in Figure 
9(a) cannot be obtained unless the reflective f am is 
removed. 

(b) A first method of achieving mass production of 
pirated disks by removing the reflective film may be 55 
by laser trimming using a high output laser such as 
a YAG laser. At the present state of technology, 
even the most highly accurate machining laser trim- 
ming can only achieve a processing accuracy of a 



few microns. In the laser trimming for semiconduc- 
tor mask corrections, it is said that 1 |im is the limit 
of the processing accuracy. This means that it is dif- 
ficult to achieve a processing accuracy of 0.1 \xm at 
the mass production level. 

(c) As a second method. X-ray exposure equipment 
for processing semiconductor masks for VLSIs and 
ion beam processing equipment are known at the 
present time as equipment that can achieve a 
processing accuracy of the order of submicrons. 
but such equipment is very expensive and further- 
more, it takes much time to process one piece of 
disk, and if each disk were processed using such 
equipment, the cost per disk would be very high. At 
the present time, therefore, the cost would become 
higher than the retail price of most legitimate disks, 
so that making pirated disks would not pay and 
meaningless. 

(d) As described above, with the first method that 
involves laser trimming, it is difficult to process with 
a submicron accuracy, and therefore, it is difficult to 
mass produce pirated disks. On the other hand, 
with the second method using the submicron 
processing technology such as X-ray exposure, the 
cost per disk is so high that making pirated disks is 
meaningless from an economic point of view. 
Accordingly, making illegal copies can be prevented 
until some day in the future when low-cost submi- 
cron processing technology for mass production 
becomes practical. Since practical implementation 
of such technology will be many years into the 
future, production of pirated disks can be pre- 
vented. In the case of a two-layer disk with a low 
reflectivity portion formed on each layer as shown 
in Figure 33, an illegally duplicated disk cannot be 
manufactured unless the pits on top and bottom are 
aligned with good accuracy when laminating, and 
this enhances the effectiveness in preventing 
piracy. 

(B) Next, we will describe how the arrangement 
angle of the low reflectivity portion on the disk can be 
specified. 

In the present invention, sufficient effectiveness in 
piracy prevention is provided by the reflective layer level 
mechanism, that is. by the low reflective marking atone. 
In this case, the prevention is effective even if the mas- 
ter disk is a duplicate. 

However, the effectiveness can be enhanced by com- 
bining it with the piracy prevention technique at the mas- 
ter disk level. If the arrangement angle of the low 
reflectivity portion on the disk is specified as shown in 
Table 532a and Table 609 in Figure 13(a), an illegal 
manufacturer would have to accurately duplicate even 
the arrangement angle of each pit on the master disk. 
This would increase the cost of pirated disks and hence 
enhance the capability to deter piracy. 

(C) The points of the present invention will be sum- 
marized below. In the present invention, a legitimate 
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manufacturer can make a legitimate disk by processing 
the disk using a general-purpose laser trimming appa- 
ratus having a processing accuracy of several tens of 
microns. Though a measuring accuracy of 0.13 jim is 
required, this can be achieved by conventional circuitry 5 
contained in a consumer DVD player. By encrypting the 
measured result with a secret encryption key, a legiti- 
mate disk can be manufactured. That is. the legitimate 
manufacturer need only have a secret key and a meas- 
uring apparatus with a measuring accuracy of 0.1 3 urn, i 0 
while the required processing accuracy is two or three 
orders of magnitude lower, that is, several tens of 
microns. This means that a convectional laser process- 
ing apparatus can be used. On the other hand, an illegal 
manufacturer, who does not have a secret key, will have 75 
to directly copy the encrypted information recorded on 
the legitimate disk. This means that a physical mark cor- 
responding to the encrypted position information, that 
is, the position information on the legitimate disk, must 
be formed with a processing accuracy of 0.13 urn. That 20 
is, the low reflective mark has to be formed using a 
processing apparatus having a processing accuracy 
two orders of magnitude higher than that of the process- 
ing apparatus used by the legitimate manufacturer. Vol- 
ume production with an accuracy higher by two orders 25 
of magnitude, i.e., with an accuracy of 0.1 ^m, is difficult 
both technically and economically, even in the foreseea- 
ble future. This means that production of pirated disks 
can be prevented during the life of the DVD standard. 
One point of the invention is to exploit the fact that the 30 
measuring accuracy is generally a few orders of magni- 
tude higher than the processing accuracy. 

In the case of CLV, the above method exploits the 
fact that the address coordinate arrangement differs 
from one master disk to another, as previously noted. 35 
Figure 19 shows the result of the measurement of 
address locations on actual CDs. Generally, there are 
two types of master disk, one recorded by rotating a 
motor at a constant rotational speed, i.e.. with a con- 
stant angular velocity (CAV), and the other recorded by 40 
rotating a disk with a constant linear velocity (CLV). In 
the case of a CAV disk, since a logical address is 
located on a predetermined angular position on the 
disk, the logical address and its physical angular posi- 
tion on the disk are exactly the same no matter how 45 
many master disks are made. On the other hand, in the 
case of a CLV disk, since only the linear velocity is con- 
trolled, the angular position of the logical address on the 
master disk is random. As can be seen from the result 
of the measurement of logical address locations on so 
actual CDs in Figure 19, the tracking pitch, start point, 
and linear velocity vary slightly from disk to disk even if 
exactly the same data is recorded using the same mas- 
tering apparatus, and these errors accumulate, result- 
ing in different physical locations. In Figure 19, the ss 
locations of each logical address on a first master disk 
are indicated by white circles, and the locationson sec- 
ond and third master disks are indicated by black circles 
and triangles, respectively. As can be seen, the physical 



locations of the logical addresses vary each time the 
master disk is made. Figure 1 7 shows the low reflectivity 
portion address tables for a legitimate disk and an ille- 
gally duplicated disk for comparison. 

The method of piracy prevention at the master disk 
level has been described above. This is, when master 
disks of CLV recording, such as a CD or DVD, are made 
from the same logic data by using a mastering appara- 
tus, as shown in Figure 19, the physical location of each 
pit on the disk varies between master disks, that is, 
between the legitimate disk and pirated disk. This 
method distinguishes a pirated disk from a legitimate 
disk by taking advantage of this characteristic. The 
piracy prevention technology at the master disk level 
can prevent pirated disks at the logic level made by sim- 
ply copying data only from the legitimate disk. However, 
recent years have seen the emergence of pirate manu- 
facturers equipped with more advanced technologies, 
who can make a master disk replica identical in physical 
feature to a legitimate disk by melting the polycarbonate 
substrate of the legitimate disk. In this case, the piracy 
prevention method at the master disk level is defeated. 
To prevent this new threat of pirated disk production, the 
present invention has devised the piracy prevention 
method at the reflective layer level wherein a marking is 
formed on a reflective film. 

According to the method of the present invention, 
the marking is formed on each disk pressed from a mas- 
ter disk, even if disks are pressed from the master disk, 
by removing a portion of the reflective film in the reflec- 
tive film formation process. As a result, the position and 
shape of the resulting low reflective marking is different 
from one disk to another. In a usual process, it is next to 
impossible to partially remove the reflective film with an 
accuracy of submicrons. This serves to enhance the 
effectiveness in preventing duplication since duplicating 
the disk of the invention does not justify the cost. 

Figure 20 shows a flowchart for detecting a dupli- 
cated CD by using the low reflectivity portion address 
table. The delay time needed to detect the optical mark 
varies only slightly due to the optical head and circuit 
designs of the reproduction apparatus used. This of the 
delay time TD circuit can be predicted at the design 
stage or at the time of mass production. The optical 
mark position information is obtained by measuring the 
number of clocks, that is. the time, from the frame syn- 
chronizing signal. Due to the effect of the circuit delay 
time, an error may be caused to detected data of the 
optical mark position information. As a result a legiti- 
mate disk may be erroneously judged as being a pirated 
disk, inconveniencing a legitimate user. A measure to 
reduce the effect of the circuit delay time TD will be 
described below. Further, a scratch made on a disk after 
purchase may cause an interruption in the reproduced 
clock signal, causing an error of a few clocks in the 
measurement of the optical mark position information. 
To address this problem, a tolerance 866 and a pass 
count 867, shown in Figure 27, are recorded on a disk, 
and while allowing a certain degree of tolerance on the 
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measured value according to the actual situation at the 
time of reproduction, the reproduction operation is per- 
mitted when the pass count 867 is reached; the margin 
allowed for an error due to a surface scratch on the disk 
can be controlled by the copyright owner prior to the 5 
shipment of the disk. This will be described with refer- 
ence to Figure 20. 

In Figure 20, the disk is reproduced in step 865a to 
recover the encrypted position information from the bar- 
code recording portion or pit recording portion of the 10 
present invention. In step 865b, decryption or signature 
verification is performed, and in step 865c, a list of opti- 
cal mark position information is recovered. Next, if the 
delay time TD of a reproduction circuit is stored in the 
circuit delay time storing section 608a in the reproduc- w 
tion apparatus of Figure 15. TD is read out in step 865h 
and the process proceeds to step 865x. If TD is not 
stored in the reproduction apparatus, or if a measure- 
ment instruction is recorded on the disk, the process 
proceeds to step 865d to enter a reference delay time 20 
measurement routine. When address Ns-1 is detected, 
the start position of the next address Ns is found. The 
frame synchronizing signal and the reproduced clock 
are counted, and in step 865f, the reference optical 
mark is detected. In step 865g, the circuit delay time TD ss 
is measured and stored. This operation is the same as 
the operation to be described later with reference to Fig- 
ure 16(7). In step 865x, the optical mark located inside 
address Nm is measured. In steps 865i, 865j, 865k, and 
865m, the optical mark position information is delected 30 
with a resolution of one clock unit, as in steps 865d, 
865y, 865f. and 865y. Next, in step 865n. a pirated disk 
detection routine is entered. First, the circuit delay time 
TD is corrected. In step 865p, the tolerance 866, i.e., tA, 
and pass count 867 recorded on the disk as shown in 35 
Figure 27. are read to check whether or not the position 
information measured in step 865g falls within the toler- 
ance tA. If the result is OK in step 865r, then in step 
865s it is checked whether the checked mark count has 
reached the pass count. If the result is OK, then in step *o 
865u the disk is judged as being a legitimate disk and 
reproduction is permitted. If the pass count is not 
reached yet. the process returns to step 865z. If the 
result is NO in step 865r, then it is checked in step 865f 
whether the error detection count is smaller than NA, 45 
and only when the result is OK, the process returns to 
step 865s. If it is not OK, then in step 865v the disk is 
judged as being an illegal disk and the operation is 
stopped. 

As described, since the circuit delay time TD of the so 
reproduction apparatus is stored in the IC ROM, optical 
mark position information can be obtained with 
increased accuracy. Furthermore, by setting the toler- 
ance 866 and pass count for the software on each disk, 
the criteria for pirated disk detection can be changed 55 
according to the actual condition to allow for a scratch 
made on the disk after purchase. This has the effect of 
reducing the probability of a legitimate disk being erro- 
neously judged as an illegal disk. 



(D) A further description will be given of the opera- 
tion of reading the nonref lective optical marking portion 
of the two-disk laminated optical disk, focusing on 
points that were not touched on in the foregoing 
description of the operating principle. 

That is. as shown in Figure 16, the start position 
address number, frame number, and clock number can 
be measured accurately with a resolution of 1 T unit, 
that is, with a resolution of 0.13 pm in the case of the 
DVD standard, by using a conventional player, thereby 
to accurately measure the optical mark of the present 
invention. Figures 27 and 28 show the optical mark 
address reading method of Figure 16 as applied to the 
DVD standard. Explanation of signals (1). (2). (3). (4), 
and (5) in Figures 27 and 28 will not be given here since 
the operating principle is the same as that shown in Fig- 
ure 16. 

The correspondence between Figure 16, which 
illustrates the principle of the detection operation for 
detecting the position of a low reflectivity portion on a 
CD, and Figures 27 and 28, which are concerned with a 
DVD, is given below. 

Figure 16(5) corresponds to Figures 27(1) and 
28(1). The reproduced clock signal in Figure 16(6) cor- 
responds to that shown in Figures 27(5) and 28(5). 
Address 603 in Figure 16(7) corresponds to that shown 
in Figures 27(2) and 28(2). 

Frame synch 604 in Figure 16(7) corresponds to 
that shown in Figures 27(4) and 28(4). Starting clock 
number 605a in Figure 16(8) corresponds to repro- 
duced channel clock number in Figure 27(6). Instead of 
the end clock number 606 in Figure 16(7), in Figures 
27(7) and 28(7) data is compressed using a 6-bit mark- 
ing length. 

As illustrated, the detection operation is fundamen- 
tally the same between CD and DVD. A first difference is 
that a 1 -bit mark layer identifier 603a as shown in Figure 
27(7) is included for identifying whether the low reflectiv- 
ity portion is of the one-layer type or two-layer type. The 
two-layer DVD structure provides a greater anti-piracy 
effect, as previously described. A second difference is 
that since the line recording density is nearly two times 
as high, 1 T of the reproduced clock is as short as 0.13 
urn, which increases the resolution for the detection of 
the position information and thus provides a greater 
anti-piracy effect. 

Shown in Figure 27 is the signal from the first layer 
in a two-layer optical disk having two reflective layers. 
The signal (1) shows the condition when the start posi- 
tion of an optical mark on the first layer is detected. Fig- 
ure 28 shows the condition of the signal from the 
second layer. 

To read the second layer, a first/second layer 
switching section 827 in Figure 15 sends a switching 
signal to a focus control section 828 which then controls 
a focus driving section 829 to switch the focus from the 
first layer to the second layer. From Figure 27, it is found 
that the mark is in address (n), and by counting the 
frame synchronizing signal (4) using a counter, it is 
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found that the mark is in frame 4. From signal (5), the 
PLL reproduced clock number is found, and the optical 
marking position data as shown by the signal (6) is 
obtained. Using this position data, the optical mark can 
be measured with a resolution of 0.13 jim on a conven- 
tional consumer DVD player. 

(E) Additional matters relating to the two-disk lami- 
nated optical disk will be further described below. 

Figure 28 shows address position information per- 
taining to the optical marking formed on the second 
layer. Since laser light penetrates the first and second 
layers through the same hole, as shown in the process 
step (b) (sic) in Figure 7, the nonreflective portion 815 
formed on the first reflective layer 802 and the nonre- 
flective portion 826 formed on the second reflective 
layer 825 are identical in shape. This is depicted in the 
perspective view of Figure 33. In the present invention, 
after the transparent substrate 801 and the second sub- 
strate 803 are laminated together, laser light is applied 
penetrating through to the second layer to form an iden- 
tical mark thereon. In this case, since coordinate 
arrangements of pits are different between the first and 
second layers, and since the positional relationship 
between the first and second layers is random when 
laminating them together, the pit positions where the 
mark is formed are different between the first and sec- 
ond layers, and entirely different position information is 
obtained from each layer. These two kinds of position 
information are encrypted to produce an anti-piracy 
disk. If it is attempted to duplicate this disk illegally, the 
optical marks on the two layers would have to be 
aligned with a resolution of about 0.13 urn. As previ- 
ously described, at the present state of technology it is 
not possible to duplicate the disk by aligning the optical 
marks with the pits with an accuracy of 0.13 jim, that is. 
with an accuracy of the order of 0.1 nm, but there is a 
possibility that mass production technology may be 
commercially implemented in the future that enables 
large quantities of single-layer disks to be trimmed with 
a processing accuracy of 0.1 urn at low cost. Even in 
that case, since the top and bottom disks are trimmed 
simultaneously in the case of the two-layer laminated 
disk 800. the two disks must be laminated together with 
the pit locations and optical marks aligned with an accu- 
racy of a few microns. However, it is next to impossible 
to laminate the disks with this accuracy because of the 
temperature coefficient, etc. of the polycarbonate sub- 
strate. When optical marks were formed by applying 
laser light penetrating through the two-layer disk 800, 
the resulting anti-piracy mark is extremely difficult to 
duplicate. This provides a greater anti-piracy effect. The 
optical disk with an anti-piracy mechanism is thus com- 
pleted. For piracy prevention applications, in cases 
where the disk process and laser cut process are insep- 
arable as in the case of the single-plate type, the 
encryption process, which is an integral part of the laser 
cut process, and processing involving a secret encryp- 
tion key have to be performed at the disk manufacturing 
factory. This means that in the case of the single-plate 



type the secret encryption key maintained in the soft- 
ware company have to be delivered to the disk manu- 
facturing factory. This greatly reduces the security of 
encryption. On the other hand, according to the method 

5 involving laser processing of laminated disks, which 
constitutes one aspect of the invention, the laser trim- 
ming process can be completely separated from the 
disk manufacturing process. Therefore, laser trimming 
and encryption operations can be performed at a fac- 

10 tory of the software maker. Since the secret encryption 
key that the software maker keeps need not be deliv- 
ered to the disk manufacturing factory, the secret key for 
encryption can be kept in the safe custody of the soft- 
ware maker. This greatly increases the security of 

is encryption. 

(2) (A) Encryption (digital signature) of marking 
position information, etc. and decryption and reproduc- 
tion of optical disk position information, etc.. which have 
been briefly described in (1). will now be described in 

20 more detail. (B) Various mechanism for piracy preven- 
tion will also be described below. 

(A) Encryption (digital signature) and its reproduc- 
tion will be described. 

(a) Simple encryption (digital signature) 

25 

(Implementation by RSA function) 

First, an example of encryption in which encryption 
is performed using a function of a message recovery 
30 type signature method, such as an RSA function, will be 
described with reference to the flowcharts shown in Fig- 
ures 22 and 24. 

As shown in Figure 22, the process consists of the 
following major routines: step 735a where marking posi- 
35 ton information is measured at the optical disk maker, 
step 695 where the position information is encrypted (or 
a digital signature is appended), step 698 where the 
position information is decrypted (or the signature is 
verified or authenticated) in the reproduction apparatus, 
40 and step 735w where a check is made to determine 
whether the disk is a legitimate optical disk or not. 

First, in step 735a, the marking position information 
on the optical disk is measured in step 735b. The posi- 
tion information is then compressed in step 735d. and 
45 the compressed position information H is obtained in 
step 735e. 

In step 695, the ciphertext of the compressed posi- 
tion information H is constructed. First, in step 695, a 
secret key, d. of 512 or 1 024 bits, and secret keys, p and 
so q. of 256 or 512 bits, are set, and in step 695b, encryp- 
tion is performed using an RSA function. When the posi- 
tion information H is denoted by M, M is raised to d-th 
power and mod n is calculated to yield ciphertext C. In 
step 695d, the ciphertext C is recorded on the optical 
55 disk. The optical disk is thus completed and is shipped 
(step 735k). 

In the reproduction apparatus, the optical disk is 
loaded in step 735m. and the ciphertext C is decrypted 
in step 698. More specifically, the ciphertext C is recov- 
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ered in step 698e, and public keys, e and n, are set in 
step 698f ; then in step b, to decrypt the ciphertext C. the 
ciphertext C is raised to e-th power and the mod n of the 
result is calculated to obtain plaintext M. The plaintext M 
is the compressed position information H. An error 5 
check may be performed in step 698g. If no errors, it is 
decided that no alterations have been made to the posi- 
tion information, and the process proceeds to the disk 
check routine 735w shown in Figure 24. ff an error is 
detected, it is decided that the data is not legitimate one, w 
and the operation is stopped. 

In the next step 736a, the compressed position 
information H is expanded to recover the original posi- 
tion information. In step 736c, measurements are made 
to check whether the marking is actually located in the is 
position on the optical disk indicated by the position 
information. In step 736d, it is checked whether the dif- 
ference between the decrypted position information and 
the actually measured position information falls within a 
tolerance. If the check is OK in step 736e, the process 20 
proceeds to step 736h to output software or data or exe- 
cute programs stored on the optical disk. If the check 
result is outside the tolerance, that is, if the two pieces 
of position information do not agree, a display is pro- 
duced to the effect that the optical disk is an illegally 25 
duplicated one, and the operation is stopped in step 
736g. RSA has the effect of reducing required capacity 
since only the ciphertext need be recorded. 

(Implementation by elliptic function) 30 

Next, another type of signature system, that is. an 
imprint type signature system using an elliptic function 
for encryption, will be described with reference to the 
flowcharts shown in Figures 23 and 24. 35 

As shown in Figure 23, etc.. the process consists of 
the following major routines: step 735a where marking 
position information is measured at the optical disk 
maker, step 735f where authentication ciphertext (i.e., 
signature) for the position information is computed, step *o 
735n where position information authentication (signa- 
ture verification) is performed in the reproduction appa- 
ratus, and step 735w where a check is made to 
determine whether the disk is a legitimate optical disk or 
not. 45 

The process from step 735a to step 735e is the 
same as that for the RSA function. 

In step 735f, authentication ciphertext for the com- 
pressed position information H is constructed. First, in 
step 735g. secret keys X (128 bits or over) and K are so 
set, and in step 735h, a public system parameter G, a 
point on an ellipse, is determined, and with f(x) as a 
one-direction function, R = f(K x G) is obtained first, 
and then R' = f(R) is obtained; then from equation 
S = (K x R' - H)X * 1 mod Q, R and S as authentication 55 
ciphertext are generated. In step 735j, the authentica- 
tion ciphertext R and S and the plaintext H of the com- 
pressed position information are recorded on the optical 
disk, and in step 735k, the completed disk is shipped. 



In the reproduction apparatus, the optical disk is 
loaded in step 735m, and an authentication operation is 
performed in step 735n to authenticate the position 
information. 

First, in step 735p, the authentication ciphertext R 
and S and the compressed position information H are 
recovered from the loaded optical disk. In step 735r, 
public keys Y, G, and Q are set, and in step 735s, an 
authentication operation is performed whereby 
f(A x Y + B x G) is obtained from A = SR 1 mod Q and 
B = HR " 1 mod Q. In step 735t. it is checked if the above 
value matches R. If they match, it is decided that no 
alterations have been made to the position information, 
and the process proceeds to the optical disk check rou- 
tine 735w in Figure 24. If they do not match, it is decided 
that the data is not legitimate one, and the operation is 
stopped. 

The subsequent process from step 736a to step 
736g is the same as that for the RSA function. That is, if 
the optical disk is judged as being an illegally duplicated 
one, a display to that effect is produced, and in step 
736g, the operation is stopped. Compared to the RSA 
function, the elliptic function has the advantage that the 
computation time is short, which serves to reduce the 
time before the reproduction starts. This system there- 
fore is suitable for application to consumer reproduction 
apparatus. 

(b) Complex encryption (digital signature) using 
master key, subkey, etc. 

Not only the marking position information but infor- 
mation concerning the features of contents of the soft- 
ware stored on the optical disk and an anti-piracy 
identifier are subjected to encryption (digital signature). 
Furthermore, two kinds of encryption keys, master key 
and subkey, are used. A specific example is described 
below in which a secret key encryption function is used 
in combination with a public key encryption function. 

Before proceeding to a detailed description of the 
specific example, a basic functional description of this 
system will be given first with reference to Figure 40 to 
facilitate understanding of the basics thereof. 

In the example treated in the following basic 
description, encryption is performed using a public key 
encryption function, and encryption using a secret key 
encryption function is not treated here. Therefore, the 
master secret key for public key encryption and the sub 
secret key for public key encryption are simply referred 
to as the master secret key and sub secret key, respec- 
tively. Likewise, the master public key for public key 
encryption and the sub public key for public key encryp- 
tion are simply referred to as the aster public key and 
sub public key, respectively. 

As shown in Figure 40. a key management center 
9001 securely manages the master secret key to main- 
tain its secrecy, and is linked to a software maker 9002, 
to be described later, via a communication line 9003. 
When a request for encryption is made from the soft- 
ware maker 9002. the key management center 9001 
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receives data, to be encrypted, via a network 9003 and 
encrypts the data using the master secret key. 

For simplicity of explanation, it is assumed here that 
the software maker 9002 also includes a disk manufac- 
turing factory. Therefore, the software maker 9002 here 5 
is a department that performs the manufacturing proc- 
ess at the disk manufacturing factory illustrated in Fig- 
ure 1 , in addition to the production of software. That is, 
when manufacturing optical disks of movie software, 
encryption for prevention of illegal duplications is also 10 
performed. To accomplish the encryption, the software 
maker 9002 obtains an exclusive sub secret key from 
the key management center 9001. The above has 
described the arrangement at the optical disk maker 
side. is 

On the other hand, there is a player 9004 at the 
user side where the optical disk is used. The player 
9004 is an apparatus for reproducing an optical disk, 
and contains a ROM in which is prestored a master pub- 
lic key corresponding to the master secret key main- 20 
tained at the key management center. A function to stop 
the reproduction of an illegally duplicated optical disk is 
also incorporated. 

Having described the general arrangement, we will 
now describe the operation. 25 

(b-1) First, the processing steps for encryption per- 
formed at the software maker 9002 will be 
described. 

The encryption step first performed (the first 
encryption step) involves- encryption at the stage of 
disk mold manufacturing, and the encrypted infor- 
mation is reflected in the shape of the disk mold. 
The encryption step performed finally (the second 
encryption step) concerns encryption performed at 
a stage after the formation of a marking by laser 
trimming. 

(1-1) In the first encryption step, encryption is 
performed using a sub public key correspond- 
ing to the sub secret key to be used in the sec- 
ond encryption step, and using a software 
feature information and anti-piracy identifier. 
The information is transferred to the key man- 
agement center 9001 via the communication 
line 9003. The software feature information 
refers to the information describing the con- 
tents of the movie software written on the opti- 
cal disk, and it is unique to each movie 
software and is different from one software to 
another. The anti-piracy identifier is provided to 
make it possible to detect whether the manu- 
factured optical disk is processed with piracy 
prevention. The identifier of an optical disk 
processed with piracy prevention using second 
ciphertext is "1"; otherwise, the identifier is "0". 
In this example, the identifier is "1 ", needless to 
say. 



(1-2) The key management center 9001 
encrypts the information transferred from the 
software maker 9002, by using the master 
secret key maintained at the center, and sends 
the encrypted information back to the software 
maker 9002. The thus created ciphertext is 
referred to as the first ciphertext. 
(1 -3) The software maker 9002 records the first 
ciphertext on the disk mold (or master) along 
with the movie software, etc. 
(1 -4) The software maker 9002 molds disks by 
using the thus completed mold. 
(1-5) Next, the software maker 9002 fabricates 
optical disks from the molded disks, and per- 
forms the laser trimming, as previously 
described, to form a marking on each optical 
disk. 

(1-6) Further, the software maker 9002 detects 
the position of the marking and encrypts the 
obtained position information by using the sub 
secret key maintained at the maker. The thus 
encrypted information is referred to as the sec- 
ond ciphertext. Since it is created by encrypting 
the position information, the second ciphertext 
is different from one optical disk to another 
even if they are pressed from the same mold. 
This is the difference from the first ciphertext. 
(1-7) Finally, the software maker 9002 records 
the second ciphertext as a barcode on the opti- 
cal disk. The optical disk is thus completed. 

(b-2) Next, we will describe the operation when the 
user who purchased the thus completed optical 
disk plays it back on the player 9004. 
(2-1) First, the player 9004 reads the first ciphertext 
recorded on the optical disk, and using the master 
public key stored in the ROM, decrypts the first 
ciphertext which contains in encrypted form the sub 
public key corresponding to the sub secret key, the 
software feature information, and the anti-piracy 
identifier. 

(2-2) In the meantime, the player 9004 extracted the 
software feature information from the contents of 
the movie software recorded on the optical disk. 
The extracted software feature information is com- 
pared with the software feature information 
obtained by decryption in (2-1); if they do not agree, 
the optical disk is judged as being an illegally dupli- 
cated one, and the subsequent reproduction opera- 
tion is stopped. If they agree, the process proceeds 
to the next step. 

(2-3) It is checked whether the anti-piracy identifier 
obtained by decryption in (2-1) is "1" or "0". If it is 
"0", the reproduction operation is immediately 
started, skipping the process hereinafter described. 
If it is "1", the process further continues. 

In this manner, if the optical disk happens to be 
a disk not processed with the piracy prevention 
using the second ciphertext, the disk can be repro- 
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duced on the player 9004 as long as its identifier is 
set to "0" in a legitimate way. If a pirate attempts to 
make an illegal copy by altering the identifier to "0", 
his effort will be thwarted because the identifier is 
encrypted using the master secret key after being 
combined with the software feature information, 
etc.. as earlier described. 

(2-4) First, the second ciphertext recorded on the 
optical disk is read out. Then, the second cipher- 
text, which is the encrypted version of the position 
information, is decrypted using the sub public key 
obtained by decryption in (2-1). 
(2-5) Using the decrypted position information, it is 
checked whether the marking is actually formed in 
the position on the optical disk indicated by the 
position information. Then, the actually measured 
marking position information is compared with the 
position information decrypted in (2-4). H they do 
not agree, the optical disk is judged as being an ille- 
gally duplicated one. and the reproduction opera- 
tion is stopped. If they agree, the optical disk is 
judged as being a legitimate one. and the reproduc- 
tion operation is started. 

An outline of the system has been described above. 
Now, a description will be given in more specific form. 

As shown in Figure 32, software feature extracting 
means 864 extracts the software parameters unique to 
the software, such as the TOC information showing the 
time organization of each chapter of the video software, 
image compression parameters, the title name, etc. 
from the contents of the software, and compresses the 
extracted information to 128 bits to 256 bits by the com- 
putation of a checksum, the computation of a Galois 
field, etc.. and a one-direction hash function 864a such 
as SHA and MD5. to create software feature information 
863. The software feature information 863 is then com- 
bined with a sub public key 861 special to the software 
maker and an anti-piracy identifier 865 as a copyright 
identifier, into one data block which is then encrypted in 
steps 866a and 866b using a master secret key for pub- 
lic key encryption and is recorded on a master disk 867 
in step 866e. along with the software proper. 

When a system is employed that uses secret key 
encryption in combination with public key encryption, a 
master secret key for secret key encryption is used in 
step 866c, encryption is performed in step 866d, and 
the data is recorded on the master disk 867 in step 
866e. 

The disk mastering process is thus completed. The 
anti-piracy identifier 865 recorded on the master disk 
defines how the copyright of the software should be pro- 
tected, and consists of at least four bits of copyright pro- 
tection flags, including a flag of one bit to indicate 
whether the software is equipped with an anti-piracy 
mechanism, a flag of one bit to indicate whether it con- 
tains a low reflectivity barcode portion, a flag of one bit 
as a scramble identifier 965a to indicate whether the 
software is scrambled or not, and a flag of one bit to 



indicate whether software dubbing is prevented or not. 
Since the anti-piracy identifier 865 and the sub public 
key 861 are combined with the software feature infor- 
mation 863 unique to the software and are encrypted 

5 together by using the master secret key for public key 
encryption, it is not possible to alter them. 

The anti-piracy identifier 865 and the sub public key 
861 are combined with the software feature information 
unique to the software, into one data block which is then 

10 encrypted by the secret key. 

If the software feature information 863 consists of 
256 bits, there are 2256 possible variations. This means 
that when software feature information is extracted from 
data obtained by authoring a particular movie software 

is product, the probability that it coincides with software 
feature information of some other software is 1/2256; 
therefore, the probability of such coincidence occurring 
is almost zero. When a one-direction hash function, 
such as MD5 or SHA, is used, if the hash value, i.e.. the 

20 software feature information 963, consists of 256 bits, 
finding two software contents having the same hash 
value will require 1018 years of computing time using a 
currently available large computer. Consequently, it is 
nearly impossible to replace software. For the software 

25 feature information of a particular software product 
authored, only one value exists, and no other software 
can have the same value. 

Since the software feature information is encrypted 
jointly with the anti-piracy identifier 865 and the sub 

30 public key 861, neither of these two values cannot be 
altered. Thus, after authoring, the anti-piracy identifier 
865 and the sub public key 861 for a particular software 
product are uniquely identified. 

The recording of the anti-piracy identifier 865 on the 

35 master disk will be descrtoed in further detail. 

How the anti-piracy identifier 865 is actually 
appended to software is at the discretion of the copy- 
right owner of the software. It takes cost and labor to 
apply an anti-piracy measure to optical disk software. 

40 Accordingly, not all optical disks are equipped with an 
anti-piracy mechanism; some optical disks incorporate 
an anti-piracy mechanism or the barcode of the present 
invention, while others do not. If legitimate disks having 
no anti-piracy mechanism or barcode are allowed to 

45 exist, reproduction apparatus are required to have a 
function that enables both types of disk to be repro- 
duced properly. In that case, when reproducing a disk 
having no piracy protection, two possibilities must be 
considered: one is that the disk is a legitimate disk for 

so which the software company has unlocked the piracy 
protection in a legitimate way. and the other is that the 
disk is a disk which the software company has produced 
with piracy protection but whose anti-piracy identifier 
has been illegally altered by a pirate. 

55 Means for identifying whether the anti-piracy identi- 
fier is legitimate or not is therefore important. 

In the present invention, the anti-piracy identifier 
865. including the anti-piracy identifier, is encrypted 
together with the software feature information by using a 
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secret key, and recorded in a ciphertexl recording sec- 
tion on the master disk. The reproduction apparatus 
decrypts the ciphertext with a prescribed public key. 
This prevents illegal alterations from being made to 
either data. 5 

The only way left to pirates is to replace the whole 
portion of the first ciphertext, which contains the soft- 
ware feature information 863 and the anti-piracy identi- 
fier 865, by different one. 

To distinguish the software feature information 863 10 
from the software feature information extracted from the 
movie software actually written on the optical disk, 
which will be described later, the former may sometimes 
be referred to as the first software feature information, 
and the latter as the second software feature informa- is 
tion. Both kinds of information are the same in that they 
relate to the contents of the same movie software, but 
different in that the former is written in encrypted form at 
the time the optical disk is manufactured, while the latter 
is extracted by examining the contents of the actually 20 
recorded movie software at the time of reproduction. 

Since the first software information 863 has a value 
unique to the software for which the authoring is com- 
pleted, the probability of some other software yielding 
the same value is iy2256, which is approximately zero, 25 
as earlier noted. If the first software information 863 is 
replaced, the information no longer agrees with the sec- 
ond software feature information 885 actually extracted 
from the disk in step 876e in the process of the check 
routine of Figure 38 performed in steps 876a, 876c. 30 
876e, and 876f. This prevents the disk with altered infor- 
mation from being played back In this way, the anti- 
piracy identifier 865 of the software and the sub public 
key hereinafter described are protected against illegal 
alterations. An illegal manufacturer, who is thinking of 35 
making illegal disks by copying the software from a legit- 
imate disk, may therefore consider making disks that do 
not have either the anti-piracy identifier or the barcode. 
In that case, the anti-piracy identifier in the anti-piracy 
identifier 865 would have to be changed from ON ("1") 40 
to OFF ("0") setting. To change the setting, however, it is 
necessary to have the key management center issue 
the first ciphertext encrypted with the master secret key 
shown at step 866a in Figure 36, but normally, meas- 
ures are in effect to prevent the key management center as 
from issuing it to an unauthorized person, thus prevent- 
ing illegal alteration of the anti-piracy identifier 865. 

That is, the first software feature information 863 
and the anti-piracy identifier 865 are encrypted together 
into the first ciphertext 886 for recording on the master so 
disk. This has the effect of thwarting any attempt by a 
pirate to make illegal copies of piracy-protected soft- 
ware in the disk format of no piracy prevention without 
an anti-piracy mark or mechanism. With this method 
that constitutes one aspect of the invention, if a disk ss 
standard is worked out, allowing the existence of disks 
without piracy protection along with disks with piracy 
protection, and if the standard is replaced by a new- 
generation standard, reproduction apparatus of the new 



generation can achieve piracy prevention against all 
disks. This is a big practical advantage. Furthermore, in 
the above embodiment, as examples of the copyright 
protection flag (identifier), examples have been 
described wherein the anti-piracy identifier 865, etc. 
which indicates whether software contents are piracy- 
prevented software or not. is used. Besides the above 
embodiment, by using an anti-copying identifier which 
indicates whether software contents are copying-pre- 
vented software or not, the disk having the copying-pre- 
vented software is protected from being sold on the 
condition of the cancelling the anti-copying identifier. 

The necessity of the master secret key and sub 
secret key in secret key of a public key encryption and 
the construction and functions of these secret keys will 
be descrtoed in detail below. 

In the piracy prevention method of the invention, the 
secret encryption key need not be delivered to the disk 
manufacturing factory since secondary recording can 
be done. However, it is not realistic to have an encryp- 
tion center create ciphertext for each of the disks manu- 
factured throughout the world and to receive the 
ciphertext via a network because this would cause an 
enormous increase in communication traffic. On the 
other hand, distributing the secret key to each software 
maker and disk manufacturing factory is not possible 
from the viewpoint of security. A method that can over- 
come this problem is therefore needed. 

As a method to overcome this problem, the present 
invention provides the master key/subkey system. 
According to the present invention, the key manage- 
ment center (key issuing center) keeps the master 
secret key which is not disclosed to the outside. On the 
other hand, the software company keeps the sub secret 
key with which the company maintains the security of its 
software on its own responsibility. As already described 
with reference to Figure 32, the software feature infor- 
mation and the sub public key the software company 
keeps are jointly encrypted, using the master secret key, 
into the first ciphertext. The reproduction apparatus 
decrypts the first ciphertext by applying the master pub- 
lic key. and extract the sub public key from the 
decrypted text. This prevents illegal alterations from 
being made to the sub public key that becomes neces- 
sary to decrypt the second ciphertext. i.e., the 
encrypted version of the marking position information. 

This means that a particular software product can 
only be encrypted using a particular secret key, that is. 
the software maker's secret key corresponding to the 
sub public key. Using the sub secret key, the software 
maker can set the key on software locked or unlocked at 
their option. 

This in turn means that pirates cannot produce 
pirated disks unless they steal the sub secret key infor- 
mation unique to the software from the software maker. 

In Figure 32, the software maker combines disk 
physical position information 868 and disk ID 869. and 
encrypts them together by using the sub secret key 876 
in step 866f to construct a public key cipher 859 which 
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is recorded on the optical disk 800 in the form of a bar- 
code. This permits the software maker to produce 
piracy-protected disks without having to have the mas- 
ter secret key 866a. The effect of this is to protect the 
security of the master secret key If the sub secret key is 5 
stolen and pirated disks are produced, the damage is 
limited to the software for which that sub secret key was 
issued. When the software maker issues a new sub 
secret key and sub public key, production of pirated 
disks of the software thereafter can be prevented. Fig- 
ures 36 and 37 are general system diagrams showing 
data flow. 

In operation. Figure 36 is the same as Figure 32. 
and detailed explanation will not be given here. In Fig- 
ure 36, the software company 871a first sets its own sub 
secret key 876. and computes the sub public key 861. 
The sub public key 861 is combined with the software 
feature information 861 of the software to be recorded, 
and transmitted to the key issuing center 872 via a net- 
work such as the Internet. The key issuing center 872 
encrypts the combined signal with the master secret key 
866a and sends back the encrypted master public key 
858 to the software company. The software company 
combines it with the software, and sends the combined 
signal to the disk manufacturing factory 873 where it is 
recorded on the master disk 867 from which the disk 
800 is produced. Referring next to Figure 37, the soft- 
ware company 871b forms a marking on the disk 800. 
reads the marking position information, encrypts the 
position information with the sub secret key 876 corre- 
sponding to the sub public key. and. using a pulsed laser 
813. records the encrypted information on the disk 800b 
in the form of a barcode. A detailed description of the 
recording operation has already be given and will not be 
repeated here. 

Next, the anti-piracy operation in the reproduction 
apparatus, when reproducing the thus completed opti- 
cal disk, will be described in further detail with reference 
to Figure 38. 

The operation consists essentially of a software 
check step 874 and a disk check step 875. In the soft- 
ware check step 874, first the first ciphertext is repro- 
duce from the disk 800 in step 876a. and then, using the 
master public key stored in the ROM in the reproduction 
apparatus in step 876c, the first ciphertext is decrypted 
into plaintext in step 876b. In step 876d, the plaintext of 
the first software feature information 863 and sub public 
key 861 is obtained, and in step 876f, it is checked 
against the second software feature information 
extracted using the one-direction hash function. If the 
check is NG in step 876g, the operation is stopped; if 
the check is OK, the sub public key is output in step 
876h. If alterations have been made to the sub public 
key or software attributes by a pirate, the two kinds of 
information do not agree, so that the reproduction of an 
illegal disk is prevented. The legitimate sub public key is 
thus obtained at the reproduction apparatus. 

In the disk check step 875, the sub public key is 
input in step 876k. and the second ciphertext. i.e., the 



public key cipher 859 (see Figure 32), is reproduce in 
step 876m. In step 876n. the second ciphertext is 
decrypted into plaintext by using the sub public key, and 
in step 876p, the marking position information is 
obtained. In this case, the marking position information 
cannot be altered illegally unless the sub secret key 876 
(see Figure 32) corresponding to the sub public key is 
leaked out. In step 876p, the actual position of the mark- 
ing formed on the disk by laser is read, and in step 876r. 
this position is checked. If the result is NO in step 876s. 
the operation is stopped in step 876t. producing a dis- 
play "Pirated Disk". If the result is YES, the reproduction 
operation is allowed to continue in step 876u. 

With the above construction, illegally duplicated 
disks cannot be reproduced on the reproduction appa- 
ratus unless the sub secret key maintained at the soft- 
ware maker is stolen or unless the nonreflective 
marking portion is laser-trimmed with an accuracy of 
submicrons. for example. 0.13 urn, and two disks are 
laminated together with an accuracy of the order of a 
few microns. This makes it virtually impossible to make 
pirated disks. This has the effect of preventing pirating 
of disks. 

(c) Detailed description of an example using a pub- 
lic key encryption function in combination with a secret 
key encryption function 

A first feature of the encryption system of the 
present invention is the use of two encryption functions, 
a public key encryption function and a secret key 
encryption function, when encrypting marking position 
information, etc. on each optical disk. 

The following description deals with problems 
encountered when actually implementing a piracy pre- 
vention method that uses public key cipher, and also 
deals with a method of implementation. The public key 
cipher here refers to the position information encrypted 
using a public key encryption function (for example, an 
RSA function). 

From the security point of view, it is desirable that all 
reproduction apparatus be equipped with a public key 
cipher decoder to decode the anti-piracy public key 
cipher of the present invention. However, processing a 
512-bit public key cipher requires 0.3 seconds using a 
32-bit. 50-MHz CPU. On the other hand, the DVD player 
control IC predominant in consumer apparatus today is 
an 8-bit one-chip microcomputer. With this CPU, it will 
take more than a few minutes to process the public key. 
This means that the user has to wait a few minutes 
before an image is reproduced from a DVD. This poses 
a problem in employing the public key cipher system in 
consumer products. 

Since, at the present level, public key cipher cannot 
be processed by the CPU used in consumer products, 
for the present there is no option but to use a secret key 
cipher decoder for consumer reproduction apparatus 
because it requires a small amount of processing time. 
However, in the case of secret key cipher, since the 
secret encryption key can be easily deciphered from 
cipher decoder information, the secret key cipher will 
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lose its anti-piracy effect once deciphered. Therefore, 
transferring to public key cipher which is difficult to deci- 
pher is imperative in the future. 

Secret key cipher and public key cipher are mutu- 
ally incompatible. If the system were simply switched 5 
from secret key cipher to public key cipher in future, sec- 
ond-generation optical disks having public key cipher 
would not be able to be decoded and reproduced on a 
first-generation player having a secret key cipher 
decoder. Furthermore, first-generation optical disks 10 
having secret key cipher would be unable to be repro- 
duced on a future player. If the player is constructed to 
allow the reproduction of such disks, it will allow pirates 
to decipher the secret key for the secret key cipher and 
create the secret key cipher using the deciphered key. is 
thus giving rise to the possibility of pirated disks being 
marketed in large quantities. If disks encrypted with 
secret key are allowed to be reproduced on future play- 
ers, piracy cannot be prevented even rf public key cipher 
is used. 20 

The need therefore arises for a mechanism which, 
if the cipher decoder of reproduction apparatus is 
changed from the secret key to the public key system in 
the future, can preserve compatibility to allow earlier 
optical disks to be reproduced properly on reproduction 25 
apparatus having a new public key cipher decoder while 
preventing the reproducing of pirated disks. 

A method ol the invention that satisfies the need tor 
compatibility is disclosed hereinafter. As shown in Fig- 
ure 39, the optical disk of the invention has both a secret 30 
key cipher recording portion 879 and a public key 
ciphertext recording portion 880. The manufacturing 
method will be described later with reference to Figure 
29. First, when reproducing the optical disk of Figure 39 
on a first-generation reproduction apparatus equipped 35 
with a secret key cipher decoder 881, the first physical 
feature information (corresponding to the encrypted ver- 
sion of the position information) unique to the legitimate 
disk is read from the secret key cipher recording portion 
879 on the disk, and decrypted by the secret key cipher 40 
decoder 881 into plaintext. Further, the second physical 
feature information (corresponding to the measured 
position information) of the disk is measured, and the 
two kinds of physical information are compared. 

In the case of a legitimate disk, the disk is normally 45 
reproduced since the two kinds of physical feature infor- 
mation agree, as shown in step 878a. 

In the case of a pirated disk, since they do not 
agree as shown in step 878c, the reproduction of the 
disk is prevented. That is, the reproduction is prevented so 
as long as the secret key cipher remains unbroken. If it 
is broken some time in the future by a pirate, as earlier 
described, the pirate can produce illegal disks in large 
quantities by illegally creating the secret key cipher. 

In that case, since the secret key decoder 881 in the ss 
first-generation reproduction apparatus checks only the 
secret key cipher, the comparison checks OK as shown 
in step 878d, allowing the illegal pirated disk to be repro- 
duced. However, by that time in the future, second-gen- 



eration reproduction apparatus having a public key 
cipher decoder 882 will have become a predominant 
type; therefore, reproducing pirated disks on the first- 
generation reproduction apparatus in an illegal manner 
will not have a significant impact. 

Since the legitimate disk of the invention has public 
key cipher, the disk is normally reproduced on the sec- 
ond-generation reproduction apparatus, as shown in 
step 878b. On the other hand, when a pirated disk is 
inserted for reproduction, the reproduction apparatus 
checks only the public key cipher, as shown in step 
878e, whether the secret key cipher is deciphered or 
not. As a result, the anti-piracy function of the public key 
cipher works, as shown in step 878e, so that the repro- 
ducing of the pirated disk on the second-generation 
reproduction apparatus is almost perfectly prevented. 

According to the invention, all disks are manufac- 
tured with both the secret key cipher 879 and public key 
cipher 880 prewritten thereon from the time of commer- 
cial introduction of the first-generation reproduction 
apparatus. Therefore, in the first stage, piracy preven- 
tion at the secret key cipher level is provided since the 
ciphertext can be processed by the 8-bit microcomputer 
mounted in the first-generation reproduction apparatus. 
In the second stage, that is, in the future when the 
secret key cipher may have be broken, more sophisti- 
cated piracy prevention can be provided by the public 
key cipher decoder incorporated in the second-genera- 
tion apparatus which will have become the predominant 
type by that time. In this way, rf one generation is 
replaced by the next generation, perfect compatibility 
with earlier media can be preserved uninterruptedly 
with the second-generation reproduction apparatus 
achieving nearly perfect piracy prevention. 

The above has described an example of application 
to the low reflectivity marking method, that is, the piracy 
prevention method at the reflective layer level, but it will 
be appreciated that the effect of preserving compatibility 
at the time of generation change can also be obtained if 
the same is applied to the piracy prevention method at 
the master disk level that uses the physical feature infor- 
mation of the master disk as shown in Figure 13. 

The above-illustrated example has the feature that, 
when performing encryption, the same information is 
encrypted by using a public key encryption function and 
a secret key encryption function separately, and the 
respectively encrypted versions of the information are 
recorded on the disk. 

Accordingly, when a transition is made in future 
from the current player equipped with a decoder, based 
on an 8-bit microcomputer, for decoding the ciphertext 
created using a secret key encryption function to the 
future player equipped with a decoder, based on a 32- 
bit microcomputer, for decoding the ciphertext created 
using a public key encryption function, the optical disk 
as described in the above example can be used effec- 
tively on either type of player. 

(B) Other mechanisms will be described. 
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(a) We will describe another specific example of the 
public key/secret key combination type in which the 
software feature information, ID number, and mark- 
ing position information are encrypted (see Figure 
29). The ID number refers to the number assigned 5 
to each disk for identifying the disk The disk ID 
(also called the disk ID number) to be described 
later is the same in meaning to the ID number. 
Major differences between the present example 
and the foregoing specific example (see Figures 32. to 
36. and 37) are: (1) In the foregoing specific exam- 
ple, the software feature information is written on 
the master disk as the first ciphertext and the mark- 
ing position information is written on a pressed disk 

as the second ciphertext. while in the present 15 
example, the software feature information, the ID 
number, and the marking position information are 
all combined together for encryption and the 
encrypted text is written on an already pressed 
disk; (2) In the foregoing example, two-stage 20 
encryption is performed using the master secret 
key and sub secret key, while in the present exam- 
ple, encryption is performed only with master secret 
key without using a key corresponding to the sub 
secret key. 25 

More specifically, as shown in Figure 29, the 
above combined signal is encoded in a secret key 
encryption section 832 by using a secret key 834 for 
secret key encryption. The same combined signal 
is also encoded in a public key encryption section 30 
831 by using a secret key 833 for public key encryp- 
tion. In this way, public key cipher is used in con- 
junction with secret key cipher. This overcomes the 
problem that the current reproduction apparatus 
can only decode the secret key cipher because of 3s 
the slow processing speed of its microcomputer. 
Future reproduction apparatus will use a higher- 
speed microcomputer, for example, of 32-bit config- 
uration and performs a piracy check by decoding 
only the public key cipher having a higher degree of 40 
security; therefore, piracy can be prevented almost 
perfectly, if the secret key cipher is broken some 
time in the future, since the public key-type player 
will be the predominant type by that time, substan- 
tial prevention of piracy can be accomplished. By 45 
recording the public key cipher simultaneously with 
the secret key cipher on the media, if a transition 
occurs from the current generation to the next-gen- 
eration player, the media can be reproduced on 
reproduction apparatus of old generation while sub- so 
stantially achieving piracy prevention. 

(b) Next, a modulation recording method for bar- 
code will be described in detail with reference to the 
same figure. 

In Figure 29, a barcode recording apparatus ss 
(PWM recording apparatus) 845 is used to write the 
encrypted information onto the disk. 

First, information concerning the position of the 
nonreflective portion 815 formed on the reflective 



layer 802 or on the second reflective layer 825 is 
detected using optical mark position detecting 
means 600. The method of detection has already 
been described with reference to Figure 15, etc., 
and therefore, explanation will not be repeated 
here. The optical mark position information, the 
software feature information and the ID number 
generated by ID generator 546 are combined by 
combining means 830. The software feature infor- 
mation is obtained by feature-extracting from a part 
of the software contents using a one-direction hash 
function such as SHA, and by obtaining a hash 
value of 128 bits or 160 bits. The ID number gener- 
ator 546 has already been described with reference 
to Figure 14, and therefore, explanation will not be 
repeated here. In the encryption section 830, the 
combined signal of the physical feature information 
is encoded in the public key encryption section 831 , 
such as RSA, by using the secret key 833 for public 
key encryption. 

The above public key cipher and the secret key 
cipher are combined in a combining section 835, 
and are affected with interleaved/Reed-Solomon 
error corrections by a Reed-Solomon encoder 838 
and an interleaver 839 in an error-correcting 
encoder 837 of a recording circuit 836. The inter- 
leave length in this case is so set as to be able to 
correct a burst error due to a disk scratch 2.38 mm 
or longer, the same level as the CD, thereby result- 
ing such effect to provide error correction of errors 
in the barcode recorded data of the invention 
against a disk scratch that may be caused in the 
worst condition in consumer use. 

The principle of the pulse width modulation 
method will be described with reference to the 
same figure. This method eliminates the need for 
the first ciphertext by the master secret key and 
second ciphertext by the sub secret key. In this 
method, the software feature information, the posi- 
tion information, and the ID number are combined 
together for encryption. Billions of ROM disks are 
produced annually. Therefore, there is a possibility 
that a disk that happens to have a marking whose 
position pattern is very easy to duplicate may be 
produced. A pirated disk could be produced by 
using a combination of this easily duplicatable 
marking position information and the legitimate 
ciphertext of this position information. In Figure 29, 
the position information is combined with the soft- 
ware feature information for encryption or for 
authentication by signature. The position informa- 
tion is therefore inseparable from the software fea- 
ture information. This means that if an easily 
duplicatable mark happens to be produced, it is 
only possible to produce pirated disks having corre- 
sponding software contents, so that potential dam- 
age will be greatly limited. It will be recognized here 
that this ciphertext may be recorded on the master 
disk. 
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The error-correction coded signal is modulated 
into a PWM signal by a pulse interval modulator 
840. When describing lines by using a laser, it is dif- 
ficult to construct a barcode by accurately control- 
ling the line width. Therefore, in the present 5 
invention, the pulse interval is classified into four 
values 1T, 2T, 3T. and 4T, as shown in Figure 30, 
and by encoding marks 843b, 843c, 843d, and 
843e as 00, 01. 10. and 1 1, for example, 2-bit data 
can be transmitted with one barcode. As shown in a 10 
table 842 showing the relationship between line 
width and recording rate in Figure 30, when record- 
ing a PIM barcode in a lead-in area of the ROM disk 
800 with line width 10 urn, it can be seen that 5.6 
kbits of information can be written additionally on J5 
the completed disk in one revolution. 

Part (1) of Figure 31 shows a nonreflective por- 
tion detection signal. 

The signals have a synchronizing signal area 
858, consisting of three pulses 857a, 857b, and 20 
857c with interval T; this area indicates the starting 
position. This is followed by a blank of 4T which is a 
reference time area for measuring reference time T. 
When the line width is 10 um, T = 20 urn. Next 
comes a first recording area 860 of about 1 kbits for 2s 
holding secondary-recorded data. Then, preceded 
by a blank 861a of 100 um or greater length, there 
is recorded a second recording area 862a for terti- 
ary-recorded data. A password for descrambling, 
etc. are recorded at a dealer. 30 

(c) The following describes the method of use of the 
barcode which can secondary- and tertiary-record 
by the HMST method. 

As shown in Figure 35, in process (2), the soft- 
ware maker may produce a disk 844b on which the 3s 
ID number unique to the disk and a private key used 
for secret communication with a user are recorded. 
The disk 844c, 844d can be reproduced without 
requiring any special procedure. 

As shown in Figure 21 to be descrtoed later, a 40 
recording/reproduction circuit implementing the 
HMST method of the invention can be constructed 
by replacing an MFM modulation/demodulation 
magnetic head in a magnetic recording/reproduc- 
tion circuit by a PWM (PIM) modulation/demodula- 45 
tion laser. 

(d) Another specific example of disk manufacturing 
is shown in Figure 35. That is, in process (3) of Fig- 
ure 35, which shows another application of the disk, 
information of scrambled MPEG video signal or the so 
like is recorded on a disk 844e. A brief operational 
description of MPEG scrambling will be given 
below. An MPEG compressed video signal is split 
between a variable-length encoder for AC compo- 
nents and a fixed-length encoder, each containing a ss 
random number adder, for scrambling. In the 
present invention, a descrambling signal is 
encrypted by an encryption encoder using a one- 
direction function. Further, a portion of a compres- 



sion program in an image compression controller is 
compressed by the encryption encoder. This makes 
it difficult for a replicating company to exchange the 
encryption encoder with an illegal one. Accordingly, 
only legitimate disks are decrypted with sub public 
key. 

Referring back to Figure 35, we will describe 
next how the disk 844e manufactured in the above 
process (3) is processed in the next process (4) and 
later processes. 

That is, in process (4) of Figure 35. using a 
master secret key the software company encrypts 
the disk ID number and a sub public key for decod- 
ing the descrambling signal, and secondary- 
records the encrypted text by barcude on the disk, 
thus completing the disk 844f. Since the disk 844f 
are scrambled, the disk cannot be reproduced as is. 
The disk ID number mentioned here is the same in 
meaning as the previously described ID number. In 
process (5), after receiving money for the disk from 
a customer, the dealer generates a password by 
using the disk ID number with the sub secret key 
corresponding to the sub public key, and tertiary- 
records the password on the disk. Once the pass- 
word has been recorded, the disk 844g can be 
reproduced on a reproduction apparatus by 
descrambling the data. In the case of a computer 
program, the program can be installed. With this 
method, if someone shoplifts a disk, images or soft- 
ware on the disk cannot be reproduced since image 
scrambling and ciphertext are not unlocked. This 
defeats the effort of a shoplifter, and thus has the 
effect of preventing shoplifting, 
(e) We interrupt here our explanation relating to Fig- 
ure 35, and refer back to Figure 21 to describe the 
operation and configuration of a reproduction appa- 
ratus incorporating a recording circuit as shown, 
concentrating on magnetic recording and reproduc- 
tion circuits which in combination of an optical 
reproduction apparatus constitute a record- 
ing/reproduction circuit. In Figure 21, a combination 
of the magnetic recording and reproduction circuits, 
and optical reproduction apparatus is shown, but 
instead, a combination of an ordinary optical repro- 
duction apparatus and a floppy disk drive may be 
used. 

In the figure, the magnetic reproduction circuit has 
two demodulators, an MFM demodulator 30d and a sec- 
ond demodulator 6b2(sic) which is another type to 
MFM, one or the other of which is selected by a selector 
661 . The corresponding modulator is kept only at the 
factory, so that a full recording capability is not provided 
although reproduction is possible. Accordingly, when a 
specially modulated area was recorded at the factory, a 
specially modulated signal is not recorded. CPU 665 on 
the drive side performs control so that no recording can 
be made unless the specially modulated signal is repro- 
duced from this area. Therefore, it can be said that this 
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area is a logical write-once area, permitting recording 
only once. Accordingly, once the machine ID. such as a 
drive ID 699a recorded in a ROM 699 in the reproduc- 
tion apparatus, has been recorded in this write-once 
area of a magnetic recording portion on an optical disk 5 
or a floppy disk, the user drive cannot alter the recorded 
contents, thus preventing illegal installation on more 
machines than a permitted number of machines. The 
drive ID mentioned here is a number assigned to each 
reproduction apparatus for identifying the apparatus. 70 
The machine ID may be an ID assigned to a personal 
computer. A network interface section 14 examines an 
HDD, etc. on a second personal computer 663 con- 
nected to a network 664 and supervises the operation 
so that the program of the same drive ID or same 15 
machine ID will not be started or run, thus preventing 
the use of illegally copied software. 

The laser marking recording method of the inven- 
tion permits secondary recording such as recording of a 
dealer code at a dealer, as does a magnetic method. 20 
This, however, does not constitute a feature of the 
present invention, and therefore, detailed explanation 
will not be given here. 

In the case of a rental video store, if a password 
were recorded permanently on a disk, and if the disk 2s 
were shoplifted, the shoplifter could play back that disk. 
To prevent this, a rental video store hands a scrambled 
disk 844j to a customer, as shown in process (6). In step 
851 g, a password for descrambling is computed from 
the disk ID or the drive ID described later by using a sub 30 
secret key. In step 851 j, the password is printed on the 
receipt which is handed to the customer. The password 
may be notified to the customer by telephone, as shown 
in step 851 u. 

The customer performs the descrambling operation 35 
shown in step 851 r on his reproduction apparatus in his 
home. First, in step 851s, the scramble identifier and the 
software feature information are decrypted from the 
ciphertext by using the sub public key. The decrypted 
software feature information is compared with the soft- 40 
ware feature information that was actually extracted 
from the software contents by using a one-direction 
hash function, to verify whether they agree or not. If ver- 
ification cannot be done, the disk is regarded as an ille- 
gal one, and the reproduction is stopped. If the 45 
scramble identifier is OFF in step 851 x, the reproduction 
operation is permitted in step 851 p. If the scramble iden- 
tifier is ON. the user enters a password from a numeric 
keypad in step 851k, and the password is computed 
using the sub public key. In step 851 1, a further compu- so 
tation is performed using the disk ID and/or drive ID. and 
only when the result of the password computation 
agrees with the disk ID or drive ID, the scramble or 
ciphertext is unlocked to permit reproduction or opera- 
tion for a prescribed number of days. When the disk has 55 
been rented out with a password only for a portion of the 
software to the customer, if the customer desires to view 
other items in the software, the customer can request by 
telephone the key issuing center to issue the password 



for the desired software Hem; the password is then noti- 
fied to the customer in step 851 u and input in step 851 k 
to enable the desired software on the disk to be repro- 
duced. 

The operation performed at the video retail store or 
rental video store in processes (5) and (6) in Figure 35 
will be described in further detail with reference to Fig- 
ure 34. The video retail store receives a scramble- or 
encryption-applied disk 844f, and after confirming pay- 
ment from the user, transmits the disk ID number and 
sub public key data of the disk 844f from a barcode 
recording/reproduction apparatus 845 to a password 
issuing center 852 via a POS terminal 846. In the case 
of a small shop system, the password issuing center, 
that is. the system containing the sub secret key for the 
sub public key. may be contained in the POS terminal. 
The password issuing center inputs the disk ID number 
and time information in step 851 q, performs computa- 
tion in step 851s, performs encryption with the sub 
secret key in step 851 1, and issues a password in step 
851g. The password is then transmitted via a network 
848 and the POS terminal 846 to the barcode recording 
apparatus 845, and the disk 844g with the password 
recorded thereon is handed to the customer. This disk 
844g can be reproduced as is. 

Next, the operation performed at the rental store 
will be described in detail. First, a ROM disk 844f locked 
with scrambling is displayed on the store shelf. When 
the particular ROM disk 844f is specified by a customer, 
a shop clerk holds in his or her hand a circular barcode 
reader 850 with a built-in rotary-type optical head 853 
generating a spiral scanning pattern, and presses it 
onto the center of the disk 800 housed in a transparent 
case, to read the barcode formed by nonreflective por- 
tions 81 5 on the reflective layer in the disk 844f, thereby 
reading the disk ID number. The product code may be 
read either from the barcode of the invention formed by 
the nonreflective portions 815 or from the circular bar- 
code prerecorded and pressed by the existing recording 
method on an inner ring portion inside the pit recording 
area of the master disk. These items of information are 
processed by the POS terminal 846, and the rental 
charge is settled; at the same time, the password corre- 
sponding to the disk ID number is issued in step 851 g. 
as previously described. For rental purposes, to limit the 
number of days for viewing, time information, as used in 
step 851 r, is appended to the disk ID number for encryp- 
tion, and the password is thus created. This password is 
valid for a preset number of days, the effect being that in 
the case of a rental disk a rental period of 3 days, for 
example, can be set in the password. 

In step 851 i. the thus issued password for unlocking 
the scramble, the date of rent, the expected data of 
return, and the rental charge of the title are printed on a 
receipt 849 which is handed to the customer together 
with the disk. The customer takes the disk 844j and 
receipt 849 home. When, in step 851k, the password is 
input from an input section 854, such as a numeric key- 
pad, on the information processing apparatus 676 
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shown in Figure 25, the password is computed with the 
disk ID number and is input to a master cipher decoder 
534 where the encrypted data is decoded into plaintext 
by using a public key. This plaintext is checked in a 
plaintext data checking section 715 to determine 5 
whether it satisfies a predetermined condition; only 
when the password is correct, program data is descram- 
bled by a sub cipher decoder 718, and the video image 
is output. 

In this case, if the password contains time informa- io 
tion. date data from a clock section 855 is checked, and 
descrambling is allowed as long as the date data 
matches the time information. The password and its cor- 
responding ID number are stored in a nonvolatile mem- 
ory 755a in a memory. 755. Once the password has w 
been entered, the user need not reenter it to perform 
descrambling. In this way, the key on a disk can be 
locked and unlocked by electronic means, which offers 
an advantage for distribution business. 

The foregoing embodiments have been described 20 
referring mainly to the disk ID method wherein a disk ID 
is appended to a disk. However, in the case of disks that 
do not have disk IDs, it becomes necessary to use the 
drive ID of the drive. The following description deals in 
detail with the descrambling, password creation, and 25 
checking operations when the drive ID alone is used 
and also when both the drive ID and disk ID are used. 

In Figure 35, when using a password relating to the 
drive ID for descrambling the software, the drive ID 699a 
stored in a ROM in the reproduction apparatus is trans- 30 
mitted from a signal section 85 1z in Figure 34 to the 
password issuing center by telephone or via personal 
computer communication. In the password issuing 
center, using the drive ID and the software ID in step 
851q. computation is performed in step 851s, and the 35 
result is encrypted with sub secret key in step 851 1, 
thereby creating a password in step 851 g. In step 851 u, 
the password is transmitted to the communication sec- 
tion 85z(sic) in the reproduction apparatus including the 
user's personal computer, by telephone or via personal 40 
computer communication. The user enters the pass- 
word in step 851 k. and decryption computation is per- 
formed using the sub public key in step 851m. In step 
851 1, the drive ID is compared with the result of the 
computation, and if they do not match, the operation is 45 
stopped. If they match, reproduction or operation is per- 
formed in step 851 p. 

The advantages and disadvantages of the drive ID 
method and the disk ID method will be described. When 
the disk ID is used, the password is valid only for one so 
particular disk. The disk can be run on any drive. This 
method is therefore suitable for movie software and the 
like. However, in the case of business software for per- 
sonal computers, if the software can be installed on any 
drive, the software on the disk may be illegally copied ss 
onto more than one computer. 

That the disk can be run only on one drive is a dis- 
advantage of the drive ID method in the case of movie 
software. This, however, becomes an advantage in the 



case of personal computer software. For business soft- 
ware that need only be installed once, the drive ID 
method has an advantage in that its password-protect 
unlocking feature prevents the software from being ille- 
gally installed on a personal computer by using other 
drives than the one designated drive. 

However, the drive ID is written in an EPROM in the 
machine, ad can be easily altered. If drives of the same 
drive ID are sold, illegal installation may be made on 
many machines. On the other hand, as already 
described, it is difficult to alter the disk ID of the present 
invention. In Figure 34. if provisions are made to create 
a password for both disk ID and drive ID in step 851 q 
and to check both IDs in step 851t. the disk ID is pre- 
vented from being altered. The resulting effect is that if 
drives of the same drive ID are distributed in large quan- 
tities, since the disk ID is valid only for one particular 
disk, illegal installation on many machines is sup- 
pressed. 

As described above, the drive ID method and the 
disk ID method have their own advantages and disad- 
vantages, and the advantages are different for different 
applications. It is expected that the drive ID method will 
be used for computer software that is installed only 
once, and the disk ID method for movie or music soft- 
ware that is reproduced many times. This requires that 
the reproduction apparatus be designed to support both 
methods. Using the flowchart of Figure 42. we will 
describe an operational procedure that handles both the 
drive ID and disk ID. When installation is started, first 
the scramble identifier is checked in step 901a whether 
it is ON or not. If the software is scrambled and the iden- 
tifier is OFF, this means an illegal operation, and the 
installation stops. The installation also stops if the iden- 
tifier is ON though the software is not scrambled. As 
already described, this scramble identifier cannot be 
altered and is therefore effective in preventing illegal 
installation. In step 901c, the personal computer is con- 
nected to the password issuing center via a network. In 
step 901d. user ID is entered, and in step 901 e. if the 
reproduction apparatus has a drive ID. the drive ID is 
transmitted to the password issuing center. After con- 
firming payment, the password issuing center performs 
encryption and computation on the drive ID and soft- 
ware ID by using a sub secret encryption key. to gener- 
ate a password. The personal computer at the user end 
performs computation to decrypt the password by using 
a sub public key. and compares it with the machine ID of 
the personal computer or the drive ID of the drive. If they 
do not match, the operation stops; if they match, the 
installation program is run in step 901 n. In the above 
case, that is, when computing the password with the 
drive ID in step 901 k, a program decryption key may be 
output to accomplish decryption or descrambling. 

Turning back to step 901 e, if there is no drive ID, 
then it is checked in step 901 h whether a disk ID is 
recorded on the disk, and if there is no disk ID, the 
installation stops. If a disk ID is recorded, the disk ID 
and the software ID are transmitted to the password 
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issuing center. The password issuing center communi- 
cates with a credit company, and after confirming online 
payment by credit, creates a password in step 901 j from 
the disk ID and software ID by using the sub secret key. 
The personal computer at the user end decrypts the 
password by using the sub public key in step 901 m. and 
if the result checks OK, program installation or software 
reproduction is carried out. 

In this way. both the drive ID and disk ID can be 
handled. This has the effect of preventing illegal instal- 
lation while allowing legitimate installation of software 
products having various IDs. 

Thus by encrypting the disk physical ID by a one- 
direction encryption encoder, copy protection security 
can be enhanced. 

As described above, according to the present 
embodiment, a nonreflective portion is formed on a 
reflective layer in an optical disk consisting of two disks 
laminated together, and at least its position information 
is encrypted and written on the same optical disk. This 
makes duplication much more difficult as compared to 
the prior art. Production of illegal copies, that is. so- 
called pirated disks, can thus be made virtually impossi- 
ble. 

As is apparent from the description so far given, the 
present invention has the advantage of achieving a 
greatly improved copy prevention capability as com- 
pared to the prior art 

Furthermore, according to the present invention, a 
piracy check mechanism can be incorporated into the 
master disk by encrypting formatted master disk physi- 
cal feature information 876 in combination with public 
key data and software feature information, as described 
with reference to Figure 32, etc. This further increases 
security. 

In Figure 26, a method was disclosed that provides 
greater network security for online shopping compa- 
nies. According to this method, the online shopping 
company secondary-records the private key for secret 
communication on all disks and distributes it to users, 
eliminating the need for sending the private key to the 
user by mail and also saving the user the trouble to key 
in the private key of many digits. Furthermore, since the 
user need not enter the private key by himself, a large 
numeric value consisting of 100 or more digits can be 
used as the private key. This greatly improves network 
security. 

In the above embodiment, the marking position 
information of the invention was written on the same 
disk, but the invention is not limited to the illustrated 
example. For example, the information may be written 
on a floppy disk as a different medium. 

Furthermore, in the above embodiment, examples 
have been described wherein an elliptic function or an 
RSA function is applied to the digital signature or digital 
signature-like technique or encryption technique. How- 
ever, the invention is not limited to the illustrated exam- 
ples, for example, a secret key encryption function such 



as DES, or any other encryption technique may be 
used. 

Moreover, in the above embodiment, the position 
information was encrypted or was provided with a digital 
5 signature, but instead, the position information itself 
may be written directly on the disk. In that case also, the 
invention is effective in preventing pirated disks from 
being made by copying the marking and its position 
information. 

w The optical disk of the invention has a structure 
such that a reflective film is sandwiched directly or indi- 
rectly between two members resistant to laser light and 
a marking is formed by laser on the reflective film. The 
above embodiment has descrbed examples in which 

is this structure is used for a piracy prevention technique, 
but it will be appreciated that such a structure may also 
be applied to other techniques. In the above embodi- 
ment, the optical disk of the invention has been 
described as being fabricated by laminating two sub- 
so strates with an adhesive layer interposed therebetween. 
However, the adhesive layer may be omitted, or instead, 
a member made of a different material, such as a pro- 
tective layer, may be used; that is, any suitable structure 
may be used as long as the reflective film is sandwiched 

25 directly or indirectly between two members resistant to 
laser light. Furthermore, in the above embodiment, the 
optical disk of the invention has been described as com- 
prising substrates as the members that are laminated 
together, but other members such as protective layers 

30 may be used; that is, any member that has resistance to 
laser light may be used. 

In the above embodiment a combination of two 
kinds of cipher, secret key cipher and public key cipher, 
has been described as a representative example of a 

35 combination of multiple kinds of ciphers of different gen- 
erations, but the invention is not limited to this particular 
example. For example, as an alternative combination of 
different generations, public key cipher raving a 256-bit 
secret key. which is less secure but can be processed 

40 by a slow CPU, and public key cipher having a 1024-bit 
secret key, which provides great security but can only be 
processed by a high-speed CPU. may be used. In this 
way. with a combination of public key ciphers having dif- 
ferent security levels, the same effect of preserving 

45 compatibility between different generations can be 
obtained. Furthermore, a combination of three kinds of 
ciphers of different generations, such as secret key 
cipher, low-security public key cipher, and high-security 
public key cipher, may also be used. 

so 

INDUSTRIAL APPLICABILITY 

As described above, in the present invention, for 
example, a marking is formed by a laser on a reflective 
55 film of a disk holding data written thereon and at least 
position information of the marking or information con- 
cerning the position information is written on the disk in 
an encrypted form or with a digital signature appended 
thereto, therefore, it is possible to provide a greatly 
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improved copy prevention capability as compared to 
prior known construction. 

Claims 

1 . A marking forming apparatus comprising: 

marking forming means for applying at least 
one marking to at least one reflective film 
formed to a disk; 

marking position detecting means for detecting 
at least one position of said marking; and 
position information output means for output- 
ting said detected position as position informa- 
tion of said marking. 

2. A marking forming apparatus according to claim 1 , 
further comprising position information writing 
means for writing at least said output position infor- 
mation or information concerning said position 
information to said disk or to a different medium. 

3. A marking forming means according to claim 2, 
wherein said position information writing means 
includes encrypting means for encrypting at least 
said output position information or information con- 
cerning said position information, and writes con- 
tents thus encrypted to said disk. 

4. A marking forming apparatus according to claim 3, 
wherein when the encrypting means performs the 
encryption, it uses a secret key of a public key 
encryption function or a secret key of a secret key 
encryption function. 

5. A marking forming apparatus according to claim 3, 
wherein said encrypting means includes 

first encrypting means for encrypting software 
feature information concerning features of soft- 
ware contents written to said disk and a sub 
public key of a public key encryption function by 
using a master secret key of said public key 
encryption function, and 

second encrypting means for encrypting said ■ 
position information or information concerning 
said position information by using a sub secret 
key corresponding to said sub public key. 
and the writing at least said output position 
information or information concerning said ; 
position information means writing contents 
encrypted by said first encrypting means and 
contents encrypted by said second encrypting 
means to said disk. 

6. A marking forming apparatus according to claim 2, 
wherein said position information writing means 
includes digital signature means for applying a dig- 
ital signature to at least said output position infor- 



mation or information concerning said position 
information, 

and the writing at least said output position 
information or information concerning said 
position information means writing information 
concerning a result of said digital signature 
application to said disk. 

7. A marking forming apparatus according to claim 6, 
wherein when said digital signature means applies 
said digital signature, it uses a secret key of a public 
key encryption function. 

8. A marking forming apparatus according to claim 6. 
wherein 

said digital signature means includes 

first digital signature means for applying a 
digital signature to software feature infor- 
mation concerning features of software 
contents written to said disk and to a sub 
public key of a public key encryption func- 
tion by using a master secret key of said 
public key encryption function, and 
second digital signature means for apply- 
ing a digital signature to said position infor- 
mation or information concerning said 
position information by using a sub secret 
key corresponding to said sub public key, 

and the writing at least said output position 
information or information concerning said 
position information means writing a result of 
the application of said digital signature by said 
first digital signature means and a result of the 
application of said digital signature by said sec- 
ond digital signature means to said disk. 

9. A marking forming apparatus according to daim 2, 
wherein the position information writing means 
writes coexistentJy such infomations that are proc- 
essed by using plural kinds of encryption tech- 
niques or digital signature techniques with regard to 
a same position information . 

10. A marking forming apparatus according to claim 4. 
5, 7, or 8, wherein said public key encryption func- 
tion is an RSA function or an elliptic function. 

1 1. A marking forming apparatus according to any one 
of claims 1 to 10, wherein said disk is constructed 
by laminating two disks together. 

12. A method of forming a laser marking to an optical 
disk, comprising the steps of: 

forming at least one disk; 
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forming a reflective film to said formed disk; 
laminating two disks together, said disks 
including at least one disk with said reflective 
film formed thereon; and 

forming at least one marking by a laser on said 5 
reflective layer of the laminated disks. 

13. A reproduction apparatus comprising: 

position information reading means for reading to 
position information of at least one marking or 
information concerning said position informa- 
tion, said marking being formed to at least one 
reflective film formed to a disk and being 
detected for a position thereof, at least the posi- is 
ton thus detected being output as said position 
information of said marking; 
marking reading means for reading information 
concerning at least one actual position of said 
marking; 20 
comparing/judging means for performing com- 
parison and judgement by using a result of 
reading by said position information reading 
means and a result of reading by said marking 
reading means; and 25 
reproducing means for reproducing recorded 
data on said optical disk in accordance with a 
result of the comparison and judgement per- 
formed by said comparing/judging means. 

30 

14. A reproduction apparatus according to claim 13, 
wherein at least said output position information or 
information concerning said position information is 
written to said disk by position information writing 
means. ss 

15. A reproduction apparatus according to claim 14. 
wherein 

said position information writing means to 
includes encrypting means for encrypting at 
least said output position information or infor- 
mation concerning said position information, 
and 

said position information reading means 45 
includes decrypting means corresponding to 
said encrypting means, and by using said 
decrypting means, decrypts said encrypted 
position information or information concerning 
said position information. so 

16. A reproduction apparatus according to claim 15. 
wherein when the encrypting means performs the 
encryption, it uses a secret key of a public key 
encryption function, and 55 

said decrypting means performs the decryption 
by using a public key corresponding to said 
secret key. 



17. A reproduction apparatus according to claim 15. 
wherein 

said encrypting means includes 

first encrypting means for encrypting soft- 
ware feature information concerning fea- 
tures of software contents written to said 
disk and a sub public key of a public key 
encryption function by using a master 
secret key of said public key encryption 
function, and 

second encrypting means for encrypting 
said position information or information 
concerning said position information by 
using a sub secret key corresponding to 
said sub public key. 

and said decrypting means includes 

first decrypting means for decrypting said 
encrypted software feature information 
and the encrypted sub public key of said 
public key encryption function, by using a 
master public key corresponding to said 
master secret key. and 
second decrypting means for decrypting 
said encrypted position information or 
information concerning said position infor- 
mation by using the sub public key thus 
decrypted. 

18. A reproduction apparatus according to claim 14, 
wherein 

said position information writing means 
includes digital signature means for applying a 
digital signature to at least said output position 
information or information concerning said 
position information, and writes information 
concerning a result of said digital signature 
application to said disk. 

and said position information reading means 
includes 

authenticating means corresponding to 
said digital signature means, and 
position information extracting means for 
obtaining said position information from an 
authentication process performed by said 
authenticating means and/or from said 
information concerning the result of said 
digital signature application, 

when an output indicating correctness of said 
authentication result is produced from said 
authenticating means, said comparing/judging 
means performs the comparison and judge- 
ment by using the position information obtained 
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by said position information extracting means 
and the result of reading by said irking reading 
means, and when said output indicating cor- 
rectness is not produced, the reproduction is 
not performed. 5 

19. A reproduction apparatus according to claim 18, 
wherein 

when said digital signature means applies said to 
digital signature, it uses a secret key of a public 
key encryption function, and 
said authenticating means performs said 
authentication by using a public key corre- 
sponding to said secret key. is 

20. A reproduction apparatus according to claim 18, 
wherein 



and when an output indicating correctness of 
said authentication result is produced from said 
authenticating means, said comparing/judging 
means performs the comparison and judge- 
ment by using the position information obtained 
by said position information extracting means 
and the result of reading by said marking read- 
ing means, and when said output indicating 
correctness is not produced, the reproduction 
is not performed. 

21. A reproduction apparatus according to any one of 
claims 13 to 20, wherein the reproduction is not per- 
formed when, as a result of said comparison and 
judgement, the result of reading by said position 
information reading means and the result of reading 
by said marking reading means do not agree with 
each other. 



said digital signature means includes 20 

first digital signature means for applying a 
digital signature to software feature infor- 
mation concerning features of software 
contents written to said disk and to a sub 
public key of a public key encryption func- 
tion by using a master secret key of said 
public key encryption function, and 
second digital signature means for apply- 
ing a digital signature to said position infor- 
mation or information concerning said 
position information by using a sub secret 
key conesponding to said sub public key, 

and the writing at least said output position 
information or information concerning said 
position information means writing a result of 
the application of said digital signature by said 
first digital signature means and a result of the 
application of said digital signature by said sec- 40 
ond digital signature means to said disk, 
wherein said position information reading 
means includes; 

authenticating means for authenticating 45 
said digital signature-applied software fea- 
ture information and sub public key of said 
public key encryption function, by using a 
master public key conesponding to said 
master secret key, and so 

position information extracting means for 
obtaining said position information from said 
authentication process thereof and/or from the 
result of said digital signature application by ss 
using the sub public key obtained from said 
authentication process and/or from the result of 
said digital signature application, 



22. A reproduction apparatus according to claim 16, 1 7. 
19, or 20. wherein said public key encryption func- 
tion is an RSA function or an elliptic function. 



24. A method of manufacturing an optical disk, com- 
prising the steps of: 

forming at least one disk; 

forming a reflective film to said formed disk: 

applying at least one marking to said reflective 

film; 

detecting at least one position of said marking; 
and 

outputting said detected position as position 

information of said marking, and applying a digital 
signature in relation to said position information for 
writing to said disk. 

25. An optical disk wherein at least one marking is 
formed by a laser to at least one reflective film of the 
disk holding data written thereon and at least posi- 
tion information of said marking or information con- 
cerning said position information is written to said 
disk in an encrypted form or with a digital signature 
applied thereto. 



23. A method of manufacturing an optical disk, com- 
25 prising the steps of: 

forming at least one disk; 
forming a reflective film to said formed disk; 
applying at least one marking to said reflective 
30 film; 

detecting at least one position of said marking; 
and 

outputting said detected position as position 

35 information of said marking, and encrypting said 
information for writing to said disk. 
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26. An optical disk having a structure such that at least 
one reflective film is sandwiched directly or indi- 
rectly between two members formed from material 
resistant to laser light, 

wherein at least one marking is formed by a laser to 5 
said reflective film. 

27. An optical disk wherein signature data and software 
contents are written to a same medium. 

10 

said signature data being obtained by applying 
a digital signature, with a secret key of a public 
key encryption function, to both 
software feature information which is obtained 
by extracting feature of software contents with is 
information feature extracting means or infor- 
mation compressing means and 
an anti-piracy identifier which indicates 
whether said software contents are piracy-pre- 
vented software or not. or an anti-copying iden- 20 
trfier which indicates whether said software 
contents are copying-prevented software or 
not. 

25 
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Fig. 6 
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Fig. 12 
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